diff --git a/account/account.py b/account/account.py index 4b88f76..d74c274 100644 --- a/account/account.py +++ b/account/account.py @@ -37,7 +37,7 @@ def verify_bcrypt(passphrase, hashed_password): def index(): return render_template('index.html') -@app.route('/api', methods=['POST']) +@app.route('/loginapi', methods=['POST']) def login(): key_to_fetch = request.form['email'] password_to_check = request.form['password'] @@ -56,6 +56,22 @@ def login(): else: return "Email not found in the database" +@app.route('/deleteapi', methods=['POST']) +def delete(): + key_to_fetch = request.form['email'] + verify_hash = request.form['hash'] + + passwordhash = fetch_hash_from_database(key_to_fetch) + + if passwordhash: + if verify_hash == passwordhash: + return "Your account would have been deleted... if this worked. Which it doesn't. Email postmaster@hectabit.org to delete your email." + else: + return "Incorrect email or password" + else: + return "Email not found in the database" + + @app.route('/dashboard') def dashboard(): if 'passwordhash' in request.cookies and request.cookies.get('passwordhash'): diff --git a/account/templates/confirm.html b/account/templates/confirm.html index 708ed38..8cce39f 100644 --- a/account/templates/confirm.html +++ b/account/templates/confirm.html @@ -14,7 +14,7 @@

Are you SURE you would like to delete your account?


-
+ diff --git a/account/templates/index.html b/account/templates/index.html index 4e2717a..5ead145 100644 --- a/account/templates/index.html +++ b/account/templates/index.html @@ -13,7 +13,7 @@

Login to your Email Account

Warning! This is only a proof of concept and has no actual use! - +