From ca396255e9c8b59a122511436e87f15cae04a9f8 Mon Sep 17 00:00:00 2001 From: Cédric Bonhomme Date: Tue, 13 May 2014 21:20:20 +0200 Subject: Check if the account has been confirmed. --- pyaggr3g470r/forms.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'pyaggr3g470r/forms.py') diff --git a/pyaggr3g470r/forms.py b/pyaggr3g470r/forms.py index fe2dd0d8..d241b90a 100644 --- a/pyaggr3g470r/forms.py +++ b/pyaggr3g470r/forms.py @@ -69,8 +69,11 @@ class SigninForm(Form): return False user = User.query.filter(User.email == self.email.data).first() - if user and user.check_password(self.password.data): + if user and user.check_password(self.password.data) and user.activation_key == "": return True + elif user.activation_key != "": + flash(lazy_gettext('Account not confirmed'), 'danger') + return False else: flash(lazy_gettext('Invalid email or password'), 'danger') #self.email.errors.append("Invalid email or password") -- cgit