Regex to catch what user has put in text box

[deanhystad]

Read this:

https://docs.python.org/3/library/subprocess.html

In particular the part about subprocess.run()

I've seen lots of times users set shell=True because they are used to running the command they want to run() in a shell. That is not why you set shell=True. Shell should normally be False.

[robertkwild]

thanks dean, where would i put this code in my script

     
@app.route('/password', methods=['GET', 'POST'])
def password():
    form = PasswordForm()
    if request.method == 'POST' and form.validate():
        return '<h1>The username is {}. The old password is {}. the new password is {}. changing for domain {}'.format(form.un.data, form.op.data, form.cnp.data, form.dom.data)
!!!!!!!!!!!!!!!!WOULD I PUT IT HERE!!!!!!!!!
    return render_template('password.html', form=form)

if __name__ == '__main__':
    app.run(debug=True)

[robertkwild]

im getting this error on cmd when i run it, ive put the code in the location i have said above

im just doing a test so thats why ive put "hostname" not the actual password reset command

c:\python\password.py:48: SyntaxWarning: invalid escape sequence '\W'
  subprocess.run('C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe hostname', shell=False)
 * Debugger is active!
 * Debugger PIN: 113-933-542

[deanhystad]

Read the documentation. You need to separate the arguments from the command, not have all in one string. You can do it the way you have, but then you need shell = True.

\ is used to start escape sequences for including non-visible characters in a string. Like \n for a new line. Use a raw string or \\ to make them just a backslash

[robertkwild]

Read the documentation. You need to separate the arguments from the command, not have all in one string. You can do it the way you have, but then you need shell = True.

\ is used to start escape sequences for including non-visible characters in a string. Like \n for a new line. Use a raw string or \\ to make them just a backslash

ok done a test and it works so when i get home tonight i will try it in my script

import subprocess

subprocess.run('C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe ipconfig', shell=True)

ok ive put this in my script but what line do i put it in my script as its not working as expected, i only want it to run ie show the ipconfig details when they hit the submit button and all the validations are good

@app.route('/password', methods=['GET', 'POST'])
def password():
    form = PasswordForm()
    if request.method == 'POST' and form.validate():
        return '<h1>The username is {}. The old password is {}. the new password is {}. changing for domain {}'.format(form.un.data, form.op.data, form.cnp.data, form.dom.data)
        return subprocess.run('C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe ipconfig', shell=True)
    return render_template('password.html', form=form)

if __name__ == '__main__':
    app.run(debug=True)

[robertkwild]

tbh il make a new thread about this as this has got nothing to do with regex now

[AdamHensley]

Regex can definitely be tricky! For the admin part, you might want to use something like (?=.*admin) to check if "admin" is part of the password and then invalidate it if found. To ensure the password meets certain criteria (like length, uppercase, digits, and special characters), you can use regex patterns like ^(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{12,}$. Combining these checks should help you validate the password effectively.