Django视图

POST视图

CSRF:CSRF（Cross-siterequestforgery跨站请求伪造，也被称为“oneclickattack”或者sessionriding，通常缩写为CSRF或者XSRF，是一种对网站的恶意利用

错误解析：

解决办法：

处理登陆请求：

登陆成功：

登陆失败：

指向event_manage.html

views.py

def login_action(request):
    if request.method == "POST":
        username = request.POST.get('username','')
        password = request.POST.get('password','')
        if username == 'admin' and password == "admin123":
            #return = HttpResponseRedirect('/event_manage/')
            #cookie的使用
            response = HttpResponseRedirect('/event_manage/')
            response.set_cookie('user',username,3600)#添加浏览器cookie
            return response
        else:
            return render(request,'index.html',{'error':'username or password error!'}) 
            #这里的error对应index.html中的error

#发布会管理系统
def event_manage(request):
    username = request.COOKIES.get('user','')#读取浏览器cookie
    #return render(request,"event_manage.html")
    return render(request,"event_manage.html",{"user":username})

event_manage.html

<!DOCTYPE html>
<html>
 <head>
    <title>Event Manage Page</title>
 </head>
 <div style="float:right;">
 <a> 嘿！{{ user }}>欢迎</a><hr/>
 </div>
 <body>
    <h1>Login Success!</h1>
 </body>
</html>

添加<div>标签来显示用户名

Session的使用：

views.py

from django.shortcuts import render
from django.http import HttpResponse,HttpResponseRedirect
# Create your views here.
def index(request):
    #return HttpResponse("Hello Django!")
    return render(request,"index.html")

#创建login_action视图函数
#登陆动作
def login_action(request):
    if request.method == "POST":
        username = request.POST.get('username','')
        password = request.POST.get('password','')
        if username == 'admin' and password == "admin123":
            #return = HttpResponseRedirect('/event_manage/')
            #cookie的使用
            response = HttpResponseRedirect('/event_manage/')
            #response.set_cookie('user',username,3600)#添加浏览器cookie

            #将session信息记录到浏览器
            request.session['user'] = username
            return response
        else:
            return render(request,'index.html',{'error':'username or password error!'}) 
            #这里的error对应index.html中的error

#发布会管理系统
def event_manage(request):
    #username = request.COOKIES.get('user','')#读取浏览器cookie

    username = request.session.get('user','') #读取浏览器session

    #return render(request,"event_manage.html")
    return render(request,"event_manage.html",{"user":username})