From c7bbe5b7383b9cd6163768113e0f3e5d81e5c689 Mon Sep 17 00:00:00 2001 From: Roozbeh Nosrati <167541056+RZB1088@users.noreply.github.com> Date: Fri, 27 Feb 2026 17:39:12 +0000 Subject: [PATCH] Create np.py --- np.py | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 np.py diff --git a/np.py b/np.py new file mode 100644 index 0000000..d18ee48 --- /dev/null +++ b/np.py @@ -0,0 +1,20 @@ +import re +import sqlite3 +from flask import request, jsonify, abort + +@app.route("/user", methods=["GET"]) +def user(): + init_db() + + # Use a context manager so the connection closes reliably + try: + with sqlite3.connect(DB) as conn: + conn.row_factory = sqlite3.Row + cur = conn.cursor() + + # Parameterized query prevents SQL injection + cur.execute( + "SELECT id, username FROM users WHERE username = ? LIMIT 1", + (username,), + ) + row = cur.fetchone()