Skip to content

Instantly share code, notes, and snippets.

@paj28 paj28/ Secret
Created Aug 13, 2017

What would you like to do?
import flask, pymysql, threading, html
app = flask.Flask(__name__)
pool = {}
def get_connection():
id = threading.current_thread()
if id not in pool:
pool[id] = pymysql.connect(host='localhost', user='user', password='letmein', db='ctf', charset='utf8')
return pool[id]
def rank2risk(rank):
if rank > 20000:
return 'low', 1
elif rank > 1000:
return 'medium', 2
return 'high', 3
def login():
return flask.send_file('templates/index.html')
def risk():
return flask.send_file('templates/risk.html')
@app.route("/quote", methods=['GET'])
def get_quote():
return flask.render_template('form.html', errors={})
@app.route("/quote", methods=['POST'])
def post_quote():
errors = {}
value = flask.request.form.get('value', '')
value_int = int(value)
except ValueError:
value_int = 0
if not(1000 <= value_int <= 100000):
errors['value'] = 'Must be a number between 1000 and 100000'
crime_rank = None
postcode = flask.request.form.get('postcode', '')
postcode_norm = postcode.upper().replace(' ', '')
with get_connection().cursor() as cursor:
cursor.execute("select crime_rank from lsoa_crime_rank join postcode_lsoa using(lsoa) where postcode=%s", postcode_norm)
results = cursor.fetchall()
if not results:
errors['postcode'] = 'Must be a residential postcode in England'
crime_rank = results[0][0]
risk = None
if crime_rank:
risk, premium_percent = rank2risk(crime_rank)
alarm = flask.request.form.get('alarm')
if risk == 'high' and not alarm:
errors['alarm'] = 'Not answered'
if errors:
return flask.render_template('form.html', **locals())
conditions = ''
if risk == 'high':
if alarm != 'yes':
premium_percent += 1
with get_connection().cursor() as cursor:
cursor.execute("select conditions from alarm_conditions where status='%s'" % alarm)
for row in cursor.fetchall():
conditions += row[0] + ' '
premium = value_int * premium_percent / 100
return flask.render_template('quote.html', **locals())
except Exception as e:
return html.escape(str(e))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.