From d55b9961704f913312ae17f837f62d1822802ecf Mon Sep 17 00:00:00 2001 From: Alexis Metaireau Date: Thu, 3 Jan 2019 13:29:56 +0100 Subject: Do not allow negative weights on users (Fixes #362) (#366) --- ihatemoney/forms.py | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) (limited to 'ihatemoney/forms.py') diff --git a/ihatemoney/forms.py b/ihatemoney/forms.py index 5374fd9..be04c8f 100644 --- a/ihatemoney/forms.py +++ b/ihatemoney/forms.py @@ -2,7 +2,7 @@ from flask_wtf.form import FlaskForm from wtforms.fields.core import SelectField, SelectMultipleField from wtforms.fields.html5 import DateField, DecimalField from wtforms.fields.simple import PasswordField, SubmitField, TextAreaField, StringField -from wtforms.validators import Email, Required, ValidationError, EqualTo +from wtforms.validators import Email, Required, ValidationError, EqualTo, NumberRange from flask_babel import lazy_gettext as _ from flask import request from werkzeug.security import generate_password_hash @@ -174,9 +174,11 @@ class BillForm(FlaskForm): class MemberForm(FlaskForm): - name = StringField(_("Name"), validators=[Required()]) - weight = CommaDecimalField(_("Weight"), default=1) + + weight_validators = [NumberRange(min=0.1, message=_("Weights should be positive"))] + weight = CommaDecimalField(_("Weight"), default=1, + validators=weight_validators) submit = SubmitField(_("Add")) def __init__(self, project, edit=False, *args, **kwargs): -- cgit v1.1