diff --git a/app/app.py b/app/app.py
index 6b40029..226a1a2 100644
--- a/app/app.py
+++ b/app/app.py
@@ -1,16 +1,32 @@
-from flask import Flask, request
+from flask import Flask, request, session, redirect
 import sqlite3
 
 app = Flask(__name__)
+app.secret_key = "hier-eigenen-geheimen-text"
 
 def get_db():
     db = sqlite3.connect("adventure.db")
     db.row_factory = sqlite3.Row   # Spalten per Name ansprechen
     return db
 
-@app.route("/")
+@app.route("/", methods=["GET", "POST"])
 def start():
-    return '<h1>Verlies</h1><a href="/app/raum/1">Abenteuer starten</a>'
+    if request.method == "POST":                 # Formular abgeschickt?
+        name = request.form["name"].strip()
+        if name != "":
+            session["spieler"] = name            # App merkt sich: das bist du
+            db = get_db()
+            db.execute(
+                "INSERT OR IGNORE INTO spielstand (spieler, raum_id) VALUES (?, 1)",
+                (name,)
+            )
+            db.commit()
+            db.close()
+            return redirect("/app/raum/1")
+
+    return '<h1>Verlies</h1>' \
+         + '<form method="post">Dein Name: ' \
+         + '<input name="name"> <button>Abenteuer starten</button></form>'
 
 @app.route("/raum/<int:id>", methods=["GET", "POST"])
 def raum(id):