naughty write to main for production

src/flask/pool_data.py

@@ -1,12 +1,12 @@
 import mongo.build_db as pool_database
 import mongo.query_db as pool_database_query
 
-from flask import Flask, render_template, request, jsonify, redirect
+from flask import Flask, render_template, request, jsonify, redirect, session
 from flask_wtf import FlaskForm, CSRFProtect
 from flask_bootstrap import Bootstrap5
 from wtforms import StringField, SubmitField, DateField, IntegerField, PasswordField, DecimalField, RadioField, TextAreaField
 from wtforms.validators import DataRequired, Length
-
+from waitress import serve
 
 app = Flask(__name__)
 app.secret_key = 'testsecret' #this value will change
@@ -42,6 +42,7 @@ def index():
         password = form.password.data
         db = pool_database_query.pool_query()
         if db.user_check(username, password):
+            session['logged_in'] = True
             return redirect("/updater")
         else:
             return render_template("index.html", try_again=True, form=form)
@@ -50,6 +51,9 @@ def index():
 
 @app.route("/updater", methods=["GET", "POST"])
 def updater():
+    if 'logged_in' not in session:
+        return redirect("/")
+
     query_db = pool_database_query.pool_query()
     query = query_db.get_top(10, "ph")
     form = dataForm()
@@ -107,4 +111,6 @@ def user_detail(id):
     return jsonify([row.to_json() for row in query])
 
 if __name__ == '__main__':
-    app.run(host='0.0.0.0', port=80)
+    #app.run(host='0.0.0.0')
+    serve(app, host='0.0.0.0', port=5000, url_scheme='https')
+