From 4b5170d6d9819ea7c78f7c222239c4a72c5a1d9a Mon Sep 17 00:00:00 2001 From: iou1name Date: Thu, 17 Oct 2019 13:39:14 -0400 Subject: [PATCH] only allow activated users in --- buckler.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/buckler.py b/buckler.py index e9c9fab..19abc1b 100644 --- a/buckler.py +++ b/buckler.py @@ -91,7 +91,7 @@ async def login(request): async with request.app['pool'].acquire() as conn: user_info = await conn.fetchrow( - "SELECT * FROM user_info WHERE username = $1", + "SELECT * FROM user_info WHERE username = $1 AND active = TRUE", username) if user_info: has_cred = await conn.fetchrow(