Program Not Working Correctly (using Python) - Login Program

This is my code: users = [] users.append([username, password]) usersFile = open('users.txt','w+') for users in users: usersFile.write('%s' % users) usersFile.close() def login

Solution 1:

It looks like you're writing out the user/passwords, as lists, as single lines in the file. Then when you read it back, each pair is read back as one string. readlines() doesn't automatically convert text back to a list object. If you want to do that, you might use Pickle instead. Pickle should let you save the entire users list of lists object all at once.

Also to be pythonic your for loop should iterate over the list directly. If you need the current index, use for i, user in enumerate(users). Using range(len(users)) is suboptimal in python. You can then use user[0] to get the username and user[1] for the password.

Solution 2:

I've made a few changes to your program. Firstly, I've changed it to use the modern print function instead of the print statement. The print function is available in Python 2.6 and later. It's more powerful than the old print statement, and IMHO it's a good idea to start using it in preparation for Python 3 (which doesn't have the print statement).

To simplify reading & writing the username & password data we can use the standard csv module. It's not strictly necessary for this simple task, but it means we don't have to worry about the messy details of parsing the name and password strings. Eg, if the strings contain spaces or quotes, the csv will handle them correctly. Note that in Python 2 CSV files must be opened in binary mode, but in Python 3 they must be opened in text mode. This is rather annoying when you're trying to write code that runs correctly on both versions.

The easy way to look up a password given the username is to use a dictionary with the username as the key and the password as the value. This is much more efficient than scanning through a list row by row looking for a match.

Of course, in a real program we would never store passwords as plain text. That's extremely insecure! The usual procedure is to store a hashed version of the password, using a strong cryptographic hash function applied a very large number of times to make it a time-consuming operation. For further info please see PBKDF2, scrypt, and bcrypt.

Also, it's bad practice to let a potential attacker know that a username is valid but that the password they submitted is invalid. That allows them to easily build a list of valid usernames. Instead, you should always ask for the password, even if the username is invalid.

from __future__ import print_function
import csv

users = [
    ['Alice', 'aardvark'],
    ['Bob', 'bobcat'],
    ['Steve', 'swordfish'],
]

# Save the users list to a CSV file
users_filename = "users.txt"withopen(users_filename, "wb") as f:
    writer = csv.writer(f)
    writer.writerows(users)

deflogin_function():
    # Load the usernames & passwords into a dictionarywithopen(users_filename, "rb") as f:
        users = dict(csv.reader(f))

    # Give the user 3 chances to loginfor i inrange(2, -1, -1):
        user_entry = raw_input("Enter your username: ")
        password_entry = raw_input("Enter your password: ")
        if user_entry in users and password_entry == users[user_entry]:
            print("Username and password are correct")
            returnTrueelse:
            print("Username and password are invalid")
            print(i, "login attempts remaining")

    print("Login failed")
    returnFalseprint(login_function())

demo

Enter your username:AlanEnter your password:runnerUsernameandpasswordareinvalid2loginattemptsremainingEnter your username:AliceEnter your password:aardvarkUsernameandpasswordarecorrectTrue