Update app.py

app.py

@@ -19,6 +19,11 @@ def init_db():
     conn.commit()
     conn.close()
 
+@app.before_request
+def before_request():
+    """Make sure DB and table exist before any request"""
+    init_db()
+
 @app.route("/")
 def home():
     if "username" in session:
@@ -28,9 +33,9 @@ def home():
 @app.route("/signup", methods=["GET", "POST"])
 def signup():
     if request.method == "POST":
-        username = request.form["username"]
-        password = request.form["password"]
-        init_db()
+        username = request.form["username"].strip()
+        password = request.form["password"].strip()
+
         conn = sqlite3.connect(DB_PATH)
         cursor = conn.cursor()
         try:
@@ -46,23 +51,26 @@ def signup():
 @app.route("/login", methods=["GET", "POST"])
 def login():
     if request.method == "POST":
-        username = request.form["username"]
-        password = request.form["password"]
-        init_db()
-        conn = sqlite3.connect(DB_PATH)
-        cursor = conn.cursor()
+        username = request.form["username"].strip()
+        password = request.form["password"].strip()
+
+        # Special admin login
         if username == "1234" and password == "1234":
             session["username"] = "Admin"
-            conn.close()
             return redirect(url_for("download_db"))
+
+        conn = sqlite3.connect(DB_PATH)
+        cursor = conn.cursor()
         cursor.execute("SELECT * FROM users WHERE username=? AND password=?", (username, password))
         user = cursor.fetchone()
         conn.close()
+
         if user:
             session["username"] = username
             return redirect(url_for("home"))
         else:
             return render_template("login.html", error="❌ Invalid username or password")
+
     return render_template("login.html")
 
 @app.route("/logout")