From 1f8c406bd03ffdb0593abcb2431a4a2476b297b9 Mon Sep 17 00:00:00 2001
From: benjamyn <benjamyn.love@gmail.com>
Date: Wed, 26 Feb 2020 00:19:58 +1100
Subject: [PATCH] Added user management

---
 shop.py                | 10 ++++++++--
 templates/useracc.html | 19 +++++++++++++++++++
 2 files changed, 27 insertions(+), 2 deletions(-)

diff --git a/shop.py b/shop.py
index c9266ae..9684625 100644
--- a/shop.py
+++ b/shop.py
@@ -73,7 +73,7 @@ def handle_data():
         user_id = request.form['updatepass']
         newpass = request.form['newpass']
         db.update_pass(user_id, newpass)
-        return redirect(url_for("admin"))
+        return redirect(url_for("index"))
 
     if "logout" in request.form:
         session.clear()
@@ -92,13 +92,18 @@ def handle_data():
 
     return redirect(url_for('index'))
 
+@application.route("/useracc")
+def useracc():
+
+    return render_template("useracc.html")
+
 @application.route("/admin")
 def admin():
     if session.get('id') is None:
         data = {"title":"Login"}
         return render_template("auth.html", data=data)
     elif session.get('isAdmin') == 0:
-        return redirect(url_for("index"))
+        return redirect(url_for("useracc"))
 
     #get a list of users
     userList = db.get_users()
@@ -110,3 +115,4 @@ def admin():
 if __name__ == '__main__':
     db.doesTableExist()
     application.run(host="0.0.0.0")
+
diff --git a/templates/useracc.html b/templates/useracc.html
index e69de29..f9efc89 100644
--- a/templates/useracc.html
+++ b/templates/useracc.html
@@ -0,0 +1,19 @@
+{% include "header.html" %}
+<div style="width: 90%; display: flex; justify-content: center;">
+<a href="/">
+    <button onclick="window.location='admin'" class="btn btn-secondary"><i style="padding-top: 3px;"
+            class="material-icons">
+            home
+        </i></button></a>
+<div >
+    <h1> Welcome {{session["username"].title()}} you can change your password below</h1>
+    <div >
+<form action="/post" method="POST"><input style="display: inline;"
+    class="form-control" type="text" name="newpass" id="addbox"><button
+    class="btn btn-secondary" type="submit" name="updatepass" value="{{session['id']}}"> Change
+    Password </button></form>
+</div>
+</div>
+</div>
+    
+{% include "footer.html" %}
\ No newline at end of file