only allow activated users in

2019-10-17 13:39:14 -04:00 · 2019-10-17 13:39:14 -04:00 · 4b5170d6d9
commit 4b5170d6d9
parent 7ed42e017e
1 changed files with 1 additions and 1 deletions
--- a/buckler.py
+++ b/buckler.py
@ -91,7 +91,7 @@ async def login(request):

 	async with request.app['pool'].acquire() as conn:
 		user_info = await conn.fetchrow(
-			"SELECT * FROM user_info WHERE username = $1",
+			"SELECT * FROM user_info WHERE username = $1 AND active = TRUE",
 			username)
 		if user_info:
 			has_cred = await conn.fetchrow(