SISTEM MBG B3
Log in untuk mengakses panel Anda
{% with messages = get_flashed_messages(with_categories=true) %}
{% if messages %}
{% for category, message in messages %}
{{ message }}
{% endfor %}
{% endif %}
{% endwith %}
© 2026 IPeKB Kabupaten Sukabumi
"""
@auth_bp.route('/login', methods=['GET', 'POST'])
def login():
if request.method == 'POST':
username = request.form['username']
password = request.form['password']
conn = sqlite3.connect(DB_NAME)
c = conn.cursor()
# Ekstrak kolom kecamatan (indeks 5 dari hasil query ini)
c.execute("SELECT id, username, role, nama_lengkap, foto_profil, kecamatan FROM users WHERE username=? AND password=?", (username, password))
user = c.fetchone()
conn.close()
if user:
session['logged_in'] = True # DITAMBAHKAN AGAR SELARAS DENGAN CEK SESSION DI DAPUR.PY
session['user_id'] = user[0]
session['username'] = user[1]
session['role'] = user[2]
session['nama_lengkap'] = user[3]
session['foto_profil'] = user[4]
session['kecamatan'] = user[5] if user[5] else 'SEMUA' # Inject Wilayah ke Session
if session['role'] == 'superadmin':
return redirect(url_for('superadmin.admin_dashboard'))
return redirect(url_for('main.dashboard'))
else:
flash('Username atau password salah!', 'error')
return redirect(url_for('auth.login'))
return render_template_string(LOGIN_HTML)
@auth_bp.route('/logout')
def logout():
session.clear()
flash('Anda telah berhasil keluar dari sistem.', 'success')
return redirect(url_for('auth.login'))
@auth_bp.route('/ubah_profil', methods=['POST'])
def ubah_profil():
if 'username' not in session:
return redirect(url_for('auth.login'))
user_id = session['user_id']
password_baru = request.form.get('password_baru')
foto_profil = request.files.get('foto_profil')
conn = sqlite3.connect(DB_NAME)
c = conn.cursor()
if password_baru:
c.execute("UPDATE users SET password=? WHERE id=?", (password_baru, user_id))
if foto_profil and foto_profil.filename != '':
filename = secure_filename(f"user_{user_id}_{foto_profil.filename}")
filepath = os.path.join(UPLOAD_FOLDER, filename)
foto_profil.save(filepath)
c.execute("UPDATE users SET foto_profil=? WHERE id=?", (filename, user_id))
session['foto_profil'] = filename
conn.commit()
conn.close()
flash('Profil berhasil diperbarui!', 'success')
return redirect(request.referrer or url_for('main.dashboard'))