Update app.py

app.py

@@ -1,49 +1,59 @@
+
+
+
+import bcrypt
 import gradio as gr
 from simple_salesforce import Salesforce
-
 # Salesforce Connection
 sf = Salesforce(username='[email protected]', 
                 password='Lavanyanaga@123', 
                 security_token='z7Wvk6mys7n8XjqbYKf3bwBh7')
 
 
+# Hash the password before saving
+def hash_password(password):
+    return bcrypt.hashpw(password.encode('utf-8'), bcrypt.gensalt()).decode('utf-8')
+
+# Verify hashed password
+def verify_password(plain_password, hashed_password):
+    return bcrypt.checkpw(plain_password.encode('utf-8'), hashed_password.encode('utf-8'))
 
-# Signup Function
+# Signup function
 def signup(name, email, phone, password):
     try:
+        hashed_password = hash_password(password)  # Encrypt the password
         sf.User_Login__c.create({
             'Name__c': name.strip(),
             'Email__c': email.strip(),
             'Phone__c': phone.strip(),
-            'Password2__c': password.strip()  # Use the new field Password2__c
+            'Password3__c': hashed_password  # Store the hashed password
         })
         return "Signup successful! You can now login."
     except Exception as e:
         return f"Error during signup: {str(e)}"
 
-# Login Function
+# Login function
 def login(email, password):
     try:
         email = email.strip()
         password = password.strip()
 
         # Query Salesforce for user details
-        query = f"SELECT Name__c, Email__c, Phone__c, Password2__c FROM User_Login__c WHERE Email__c = '{email}'"
+        query = f"SELECT Name__c, Email__c, Phone__c, Password3__c FROM User_Login__c WHERE Email__c = '{email}'"
         result = sf.query(query)
 
         if len(result['records']) == 0:
-            print(f"No user found with email: {email}")
             return "Invalid email or password.", None, None, None
 
         user = result['records'][0]
-        stored_password = user['Password2__c']
+        stored_password = user['Password3__c']
 
         print(f"Entered Email: {email}")
         print(f"Entered Password: {password}")
-        print(f"Stored Password: {stored_password}")
+        print(f"Stored Hashed Password: {stored_password}")
 
-        # Compare plain-text passwords
-        if password == stored_password:
+        # Verify the entered password with the stored hash
+        if verify_password(password, stored_password):
             print("Password matched!")
             return "Login successful!", user['Name__c'], user['Email__c'], user['Phone__c']
         else: