bug fix: logged out users cant view auction page, added flash to click unlisted art

app/dashboards.py

@@ -19,10 +19,11 @@ def market():
 
     if request.method == "POST":
         focus_item = request.form.get('focus_but')
-        u_dbcall = User.query.filter_by(id=current_user.id).first()
-        u_dbcall.focus = focus_item
-        db.session.commit()
-        return redirect(url_for('dashboards.detail'))
+        if focus_item and current_user.is_authenticated:
+            u_dbcall = User.query.filter_by(id=current_user.id).first()
+            u_dbcall.focus = focus_item
+            db.session.commit()
+            return redirect(url_for('dashboards.detail'))
 
     return render_template('market.html', user=current_user, listings = return_list)
 	
@@ -33,6 +34,8 @@ def profile():
     form2 = PicForm()
     user_bid_hist = collector.user_bid_hist(current_user.id)
 
+    # This takes a post request button press
+    # when user clicks on a photo
     if request.method == "POST":
         focus_item = request.form.get('focus_but')
         if focus_item and collector.check_art_listing(focus_item):
@@ -40,10 +43,12 @@ def profile():
             u_dbcall.focus = focus_item
             db.session.commit()
             return redirect(url_for('dashboards.detail'))
-        elif focus_item and collector.check_art_listing(focus_item):
-            pass
+        elif focus_item and not collector.check_art_listing(focus_item):
+            # else if there's a click but no listing, don't do anything
+            flash('Auction page not available to items not for sale!', category='error')
 
 
+    # Profile Picture Update Form
     if form2.validate_on_submit():
         print('passsing')
         f =  form2.upload.data
@@ -54,12 +59,13 @@ def profile():
             flash('Updated Profile Picture!', category='success')
         
 
+    # Password Update Form
     if form.validate_on_submit():
         cpasswd = form.cpasswd.data
         passwd = form.passwd_1.data
         passwd_con = form.passwd_2.data
 
-        # password check before update
+        # Basic password checks before adding to db
         if passwd and passwd_con and cpasswd:
             if passwd == passwd_con and check_password_hash(current_user.password, cpasswd):
                 npasswd_dbcall = User.query.filter_by(id=current_user.id).first()