低安全密码/用户名概念烧瓶安全错误

Question

基本上只是尝试制作一个几乎没有安全性但不断收到内部服务器错误的简单登录页面，如果我出错了，任何帮助将不胜感激。我试过四处寻找，但找不到任何东西。我对 Python 也很陌生，所以放轻松:)

Python/Flask：

@app.route('/adminlogin')
def admin():
    return render_template('adminlogin.html')

@app.route('/adminDetails', methods =['POST'])  
    def adminLogin():
        correctUser = 'admin'
        correctPass = 'Password1'
        username = request.form['username']
        password = request.form['password']

    if username == correctUser & password == correctPass:
        adminSuccess()
    else: 
        admin()


@app.route('/admin')
def adminSuccess():
    return render_template('admin.html')

HTML：

<form action="/adminDetails" method="post">
        Username<input name="username" type = "text" maxlength="32" size="12" placeholder="Username" required><br>
        Password<input name ="password" type="password" maxlength="20" size="12" placeholder="Password" required><br>
        <button class ="menuitem" type="submit" value="submit">Submit</button>
        <button class="menuitem" type ="reset" value ="Clear">Clear</button>
    </form>

追溯：

 Traceback (most recent call last):
      File "C:\Users\\AppData\Local\Programs\Python\Python35-32\lib\site-    packages\flask\app.py", line 1836, in __call__ 
    return self.wsgi_app(environ, start_response)
  File "C:\Users\\AppData\Local\Programs\Python\Python35-32\lib\site-packages\flask\app.py", line 1820, in wsgi_app
    response = self.make_response(self.handle_exception(e))
  File "C:\Users\\AppData\Local\Programs\Python\Python35-32\lib\site-packages\flask\app.py", line 1403, in handle_exception
    reraise(exc_type, exc_value, tb)
  File "C:\Users\\AppData\Local\Programs\Python\Python35-32\lib\site-packages\flask\_compat.py", line 33, in reraise
    raise value
  File "C:\Users\\AppData\Local\Programs\Python\Python35-32\lib\site-packages\flask\app.py", line 1817, in wsgi_app
    response = self.full_dispatch_request()
  File "C:\Users\\AppData\Local\Programs\Python\Python35-32\lib\site-packages\flask\app.py", line 1478, in full_dispatch_request
    response = self.make_response(rv)
  File "C:\Users\\AppData\Local\Programs\Python\Python35-32\lib\site-packages\flask\app.py", line 1566, in make_response
        raise ValueError('View function did not return a response')
    ValueError: View function did not return a response

Answer 1

由于我无法发表评论，因此我必须将这条建议留在答案部分。
您应该尝试在调试设置为 true 的情况下运行您的应用。这将为您提供导致错误的整个追溯，而不是“内部服务器错误”

app.run(debug=True)

发布回溯，我们都会更好地为您提供帮助。

编辑：您的回溯表明您的视图函数实际上并没有返回任何内容。他们需要返回某种响应。因此，您需要做的是在 adminLogin() 视图中的 if else 语句中返回这些函数调用

Answer 2

这一行是错误的：

if username == admin & password == Password1:

应该是：

if username == admin and password == Password1:

---

例如：

>>> 1 == 1 & 2 == 2
False

您可以给我们完整的错误日志，以便我们找出错误。

---

错误日志显示原因：

ValueError: View 函数没有返回响应

所以你需要重定向到页面。

@app.route('/adminDetails', methods =['POST'])  
def adminLogin():
    correctUser = 'admin'
    correctPass = 'Password1'
    username = request.form['username']
    password = request.form['password']

    if username == correctUser and password == correctPass:
        return redirect(url_for('adminSuccess'))
    else: 
        return redirect(url_for('admin'))

文档：redirect