login: go to posts only if user exist in db

3v0k4 · Jul 20, 2019 · b90b5cc · b90b5cc
1 parent 1ec890d
commit b90b5cc
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/src/Handler/Landing.hs b/src/Handler/Landing.hs
@@ -29,8 +29,15 @@ postLandingR :: Handler Html
 postLandingR = do
   ((result, widget), enctype) <- runFormPost loginForm
   case result of
-    FormSuccess _ ->
-      redirect PostsR
+    FormSuccess login -> do
+      user <- runDB $ selectList [ UserIdent ==. username login, UserPassword ==. Just (password login) ] []
+      case user of
+        [] ->
+          emptyLayout $ do
+            $(widgetFile "landing")
+
+        _ ->
+          redirect PostsR
     _ ->
       emptyLayout $ do
         $(widgetFile "landing")