blog开发之后台管理

后台管理

主要功能：

1.文章的增删改查。

2.添加文章用到开源的kindediter编辑器。

页面效果：

 

 视图代码

@login_required
def cn_backend(request):
    article_list = models.Article.objects.filter(user=request.user).all()
    return render(request, 'blog/backend/backend.html', {'article_list': article_list})


@login_required
def add_article(request):
    if request.method == 'POST':
        title = request.POST.get('title')
        content = request.POST.get('content')
        soup = BeautifulSoup(content, 'html.parser')
        desc = soup.text[0:150] + '...'
        models.Article.objects.create(title=title, content=content, desc=desc, user_id=request.user.pk)
        return redirect(reverse('blog:cn_backend'))
    return render(request, 'blog/backend/add_article.html')


@login_required
def upload(request):
    img_obj = request.FILES.get("upload_img")
    path = os.path.join(settings.MEDIA_ROOT, 'add_article_img', img_obj.name)
    with open(path, 'wb') as f:
        for line in img_obj:
            f.write(line)
    response = {
        'error': 0,
        'url': '/blog/media/add_article_img/%s' % img_obj.name
    }

    return JsonResponse(response)


@login_required
def edit_article(request, article_id):
    res = BaseResponse()
    article_obj = models.Article.objects.filter(pk=article_id).first()
    if not article_obj:
        res.code = 3001
        res.error = '图书不存在！'
        return JsonResponse(res.dict)
    if article_obj.user.pk != request.user.pk:
        res.code = 3002
        res.error = '非法操作'
        return JsonResponse(res.dict)
    if request.method == 'POST':
        title = request.POST.get("title")
        content = request.POST.get("content")
        # 防止xss攻击,过滤script标签
        soup = BeautifulSoup(content, "html.parser")

        desc = soup.text[0:150] + "..."
        models.Article.objects.filter(pk=article_id).update(title=title, desc=desc, content=str(soup),
                                                            user=request.user)
        return redirect(reverse('blog:cn_backend'))
    return render(request, 'blog/backend/change_article.html', {'article_obj': article_obj})


@login_required
def del_article(request, article_id):
    res = BaseResponse()
    article_obj = models.Article.objects.filter(pk=article_id).first()
    if not article_obj:
        res.code = 3001
        res.error = '图书不存在！'
        return JsonResponse(res.dict)
    if article_obj.user.pk != request.user.pk:
        res.code = 3002
        res.error = '非法操作'
        return JsonResponse(res.dict)

    origin_url = reverse('blog:cn_backend')
    if request.method == 'GET':
        return render(request, 'blog/backend/delete.html', {'cancel': origin_url})
    models.Article.objects.filter(pk=article_id).delete()
    return redirect(origin_url)

注意：

1.进入后台前需要登录，用Django自带的auth模块的装饰器login_required来实现。

2.添加文章，后台通过Bs4模块的BeautifulSoup来过滤非法字符串。

3.上转图片成功后，返回的字典要满足编辑器要求的格式。而且上传的文件夹要提前建立好。