diff --git a/server.py b/server.py index 42c2f6c..88cb812 100755 --- a/server.py +++ b/server.py @@ -35,7 +35,7 @@ def index(): @app.route('/create-user', methods=["POST"]) def createUser(): createUser(flask.request.form) - return ("Success", 200) + return (EMPTY, HTTP_EMPTY) @app.route('/delete-user', methods=["POST"]) def deleteUser(): @@ -43,8 +43,8 @@ def deleteUser(): user = db.session.query(FTPUser).filter(FTPUser.username == userToDelete).first() if not user: return ("User doesn't exist.", 405) - print(userToDelete) - return (EMPTY, HTTP_EMPTY) + subprocess.run(["/usr/bin/sudo", "./scripts/delete_user.sh", cryptPass, webform['username']]) + return ("/list-users", 200) @app.route('/list-users') def listUsers(): @@ -55,7 +55,7 @@ def createUser(webform): # command line useradd requires a pre-encrypted password cryptPass = crypt.crypt(webform['password'], PAM_PASSWD_SALT) - #subprocess.run(["./scripts/create_user.sh", cryptPass, webform['username']]) + subprocess.run(["/usr/bin/sudo", "./scripts/create_user.sh", cryptPass, webform['username']]) # track added users to prevent deletion of other users and listing # db.session.add(FTPUser(username=webform['username']))