网站后台登录的密码修改

from flask import Flask, request, redirect, url_for, flash from werkzeug.security import generate_password_hash, check_password_hash import sqlite3  app = Flask(__name__) app.secret_key = 'your_secret_key'  # 假设这是连接数据库并获取用户信息的函数 def get_user(username):     conn = sqlite3.connect('users.db')     cursor = conn.cursor()     cursor.execute("SELECT * FROM users WHERE username=?", (username,))     user = cursor.fetchone()     conn.close()     return user  @app.route('/change_password', methods=['POST']) def change_password():     current_username = request.form['current_username']     current_password = request.form['current_password']     new_password = request.form['new_password']     confirm_password = request.form['confirm_password']      # 验证当前用户和密码     user = get_user(current_username)     if not user or not check_password_hash(user[2], current_password):         flash('无效的用户名或密码！')         return redirect(url_for('password_page'))      # 检查新密码是否一致     if new_password != confirm_password:         flash('新密码不匹配！')         return redirect(url_for('password_page'))      # 更新密码     hashed_password = generate_password_hash(new_password)     conn = sqlite3.connect('users.db')     conn.execute("UPDATE users SET password=? WHERE username=?", (hashed_password, current_username))     conn.commit()     conn.close()      flash('密码已成功更改！')     return redirect(url_for('home_page'))  if __name__ == '__main__':     app.run(debug=True)