fixes

routes/activity_leader.py

@@ -173,7 +173,9 @@ def students_callback():
 
     # perform some validation against database
     leader = dict_sql_query(
-        f"SELECT * FROM leaders WHERE email='{oauth_user['email']}'", fetchone=True
+        "SELECT * FROM leaders WHERE email = %s",
+        fetchone=True,
+        params=(oauth_user["email"],),
     )
 
     if not leader:

routes/admin.py

@@ -57,7 +57,9 @@ def admin_callback():
 
     # perform some validation against database
     admin = dict_sql_query(
-        f"SELECT * FROM admins WHERE email='{oauth_user['email']}'", fetchone=True
+        "SELECT * FROM admins WHERE email = %s",
+        fetchone=True,
+        params=(oauth_user["email"],),
     )
 
     if not admin:

templates/leader/index.html

@@ -65,5 +65,6 @@ <h2>Elever registrerade på aktivitet {{ activity["name"] }}</h2>
     </tbody>
   </table>
   {% endfor %}
+  <p>Utskriftsdatum: {{ generation_time }}</p>
 </div>
 {% endblock %}