code_shield.py

gistfile1.txt

from flask import Flask, request
import sqlite3

app = Flask(__name__)

# Set up database
def init_db():
    conn = sqlite3.connect('users.db')
    c = conn.cursor()
    c.execute('CREATE TABLE IF NOT EXISTS users (username TEXT, password TEXT)')
    c.execute("INSERT INTO users VALUES ('admin', 'secret')")
    conn.commit()
    conn.close()

@app.route('/', methods=['GET', 'POST'])
def login():
    if request.method == 'POST':
        user = request.form['username']
        pwd = request.form['password']
        conn = sqlite3.connect('users.db')
        c = conn.cursor()
        query = f"SELECT * FROM users WHERE username = '{user}' AND password = '{pwd}'"
        print("Executing:", query)
        c.execute(query)
        if c.fetchone():
            return "✅ Login successful!"
        return "❌ Login failed!"
    return '''
<form method="post">
    Username: <input name="username"><br>
    Password: <input name="password"><br>
    <input type="submit" value="Login">
</form>
'''
if __name__ == '__main__':
    init_db()
    app.run(debug=True)