- if request.form['username'] != app.config['USERNAME']:
- error = 'Invalid username'
- elif request.form['password'] != app.config['PASSWORD']:
- error = 'Invalid password'
- else:
- session['logged_in'] = True
- session['nickname'] = request.form['username']
- if session['nickname'] == 'admin':
+ if valid_login(request.form['username'], request.form['password']):
+ session['username'] = request.form['username']
+ if session['username'] == 'admin':