密码保护
1.更新User对象，设置对内的_password
class User(db.Model):
__tablename__ = 'user'
_password = db.Column(db.String(200), nullable=False) #内部使用
2.编写对外的password
from werkzeug.security import generate_password_hash, check_password_hash
@property
def password(self): #外部使用，取值
return self._password
@password.setter
def password(self, row_password):#外部使用，赋值
self._password = generate_password_hash(row_password)
3.密码验证方法：
def check_password(self, row_password): #密码验证
result = check_password_hash(self._password,row_password)
return result
4.登录验证：
password1 = request.form.get('password')
user = User.query.filter(User.username == username).first()
if user:
if user.check_password(password1):
代码如下：
from flask import Flask, render_template, request, redirect, url_for, session from flask_sqlalchemy import SQLAlchemy from sqlalchemy import or_,and_ from functools import wraps from hashlib import md5 import os import congif app = Flask(__name__) app.config.from_object(congif) db = SQLAlchemy(app) # 用户信息 class User(db.Model): __tablename__ = 'user' id = db.Column(db.String(17), primary_key=True) # 数据库唯识别id name = db.Column(db.String(20), nullable=False) # 登录账号名 title = db.Column(db.String(30)) # 显示名称 password = db.Column(db.String(42), nullable=False) # 密码 truename = db.Column(db.String(10)) # 真实姓名 sex = db.Column(db.String(1), default='0') # 性别 phone = db.Column(db.String(11)) # 电话号码 email = db.Column(db.String(40)) # 邮箱 logo = db.Column(db.String(50)) # 头像 qq = db.Column(db.String(11)) # qq号码 createdate = db.Column(db.DATETIME) # 注册日期 level = db.Column(db.String(2)) # 用户等级 address = db.Column(db.String(60)) # 用户住址 # 图书分类 classification(id,name,content) class Classification(db.Model): __tablname__ = 'classification' id = db.Column(db.String(17), primary_key=True) # 数据库唯识别id name = db.Column(db.String(30)) # 文章名称 logo = db.Column(db.String(50)) # 头像地址 context = db.Column(db.TEXT) # 分类内容 # book(id,title,abstracts,content,createdate,author_id,size,chilk,disc,classification) # 发布图书及问答 class Book(db.Model): __tablname__ = 'book' id = db.Column(db.String(17), primary_key=True) # 数据库唯识别id title = db.Column(db.String(30)) # 文章标题 abstracts = db.Column(db.String(150)) # 文章摘要 content = db.Column(db.TEXT) # 文章内容 createdate = db.Column(db.DATETIME) # 发布时间 author_id = db.Column(db.String(17), db.ForeignKey('user.id')) # 发布者id size = db.Column(db.String(30)) # 文章长度 chilk = db.Column(db.Integer()) # 阅读数 disc = db.Column(db.Integer()) #点赞数 classification = db.Column(db.String(17), db.ForeignKey('classification.id')) # 文章分类id authorClass = db.relationship('User', backref=db.backref('book')) classificationClass = db.relationship('Classification', backref=db.backref('book')) # 评论表 class Commentaries(db.Model): __tablname__ = 'commentaries' id = db.Column(db.String(17), primary_key=True) # 数据库唯一识别id book_id = db.Column(db.String(17), db.ForeignKey('book.id')) # 评论对应的文章的id question_id = db.Column(db.String(17)) # 问题的提出者id，或者是文章作者id answer_id = db.Column(db.String(17), db.ForeignKey('user.id')) # 回答问题用户的id date = db.Column(db.DATETIME) # 回答日期 content = db.Column(db.TEXT) # 回答内容 answer = db.relationship('User', backref=db.backref('commentaries')) book = db.relationship('Book', backref=db.backref('commentaries',order_by=date.desc)) # db.create_all() # 增加一条数据 # user = User(name = 'xiao',password = '123') # db.session.add(user) # db.session.commit() # 查询一条数据 # user = User.query.filter(User.name=='xiao').first() # print(user.name,user.password) # 更改一条数据 # user = User.query.filter(User.name=='xiao').first() # user.password = 'xxx' # db.session.commit() # 删除一条数据 # user = User.query.filter(User.name=='xiao').first() # db.session.delete(user) # db.session.commit() # 退出登录 @app.route('/logout/') def logout(): session.pop('user_id') session.pop('title') return redirect(url_for('index')) # 登录 @app.route('/login/', methods=['GET', 'POST']) def login(): if request.method == 'POST': user_name = request.form.get('user_name') user_password = request.form.get('user_password') user = User.query.filter(User.name == user_name, User.password == md5(user_password.encode("utf-8")).hexdigest()).first() if user: session['user_id'] = user.id session['title'] = user.title session.permanent = True poi = request.args.get('poi') if poi: return redirect(url_for('poi', book_id=poi)) return redirect(url_for('index')) else: return redirect(url_for('login')) else: return render_template('login.html') # 上下文处理器 @app.context_processor def myContext(): id = session.get('user_id') title = session.get('title') if id: user = User.query.filter(User.id == id).first() else: user = {} if title: return {'title': title, 'user_id': id, 'user': user} else: return {} # 注册 @app.route('/regist/', methods=['GET', 'POST']) def regist(): if request.method == 'GET': user_name = request.args.get('user_name') if user_name: user = User.query.filter(User.name == user_name).first() if user: return '用户已存在' else: return 'ok' else: return render_template('regist.html') else: user_name = request.form.get('user_name') user_title = request.form.get('user_title') user_password = request.form.get('user_password') user = User.query.filter(User.name == user_name).first() if user: return 'error:user exitst' else: user = User(id="1", name=user_name, title=user_title, password=user_password) db.session.add(user) # 加入数据库 db.session.commit() return redirect(url_for('login')) # 定义一个装饰器出验证用户有是否是登陆 # 定义一个参数函数 def loginFirst(func): # 定义一个函数将其返回 @wraps(func) def wrapper(*args, **kwargs): if session.get('title'): return func(*args, **kwargs) else: return redirect(url_for('login')) # 返回一个函数 return wrapper # 发布问答 @app.route('/question', methods=['GET', 'POST']) @loginFirst def question(): if request.method == 'GET': classfly = Classification.query.all() context = { 'classfly' : classfly } return render_template('question.html',**context) else: book_title = request.form.get('title') book_content = request.form.get('content') abstracts = request.form.get('abstracts') classification = request.form.get('classification') user_id = request.form.get('user_id') size = request.form.get('size') book = Book(id='1', title=book_title, abstracts=abstracts, content=book_content, author_id=user_id,classification=classification,size=size) db.session.add(book) # 加入数据库 db.session.commit() return 'true' # 详情页面 @app.route('/poi/<book_id>') def poi(book_id): book = Book.query.filter(Book.id == book_id).first() answer = len(Commentaries.query.filter(Commentaries.book_id==book_id).all()) book.chilk = book.chilk+1 db.session.commit() id = session.get('user_id') if id: user = User.query.filter(User.id == id).first() else: user = {} return render_template('poi.html', book=book, user=user,answer=answer) # 点赞 @app.route('/disc/') def disc(): book_id = request.args.get('book_id') book = Book.query.filter(Book.id == book_id).first() book.disc = book.disc+1 db.session.commit() return str(book.disc) # 发布评论 @app.route('/answer/', methods=['GET', 'POST']) def answer(): if request.method == 'POST': book_id = request.form.get('book_id') question_id = request.form.get('question_id') answer_id = request.form.get('answer_id') content = request.form.get('content') commentaries = Commentaries(id='1', book_id=book_id, question_id=question_id, answer_id=answer_id, content=content) db.session.add(commentaries) db.session.commit() commentaries = Commentaries.query.filter(Commentaries.book_id == book_id).order_by('-date').all() context = { 'commentaries': commentaries, } return render_template('answer.html', **context) else: book_id = request.args.get('book_id') commentaries = Commentaries.query.filter(Commentaries.book_id == book_id).order_by('-date').all() context = { 'commentaries': commentaries, } return render_template('answer.html', **context) # 某用户发布过的所有评论 @app.route('/commentaries/<user_id>',methods=['GET','POST']) def commentaries(user_id): user = User.query.filter(User.id == user_id).first() content = { 'userCommentaries':user.commentaries, 'books':user.book, 'num': len(user.commentaries), 'user2':user } return render_template('commentaries.html', **content) # 设置中心 @app.route('/config/<user_id>',methods=['GET','POST']) @loginFirst def config(user_id): user = User.query.filter(User.id == user_id).first() if request.method == 'GET': return render_template('config.html') else: user.title = request.form.get('title') user.truename = request.form.get('truename') user.sex = request.form.get('sex') user.qq = request.form.get('qq') user.phone = request.form.get('phone') user.email = request.form.get('email') user.address = request.form.get('address') db.session.commit() return render_template('config.html') # 上传头像 @app.route('/uploadLogo/<user_id>',methods=['GET','POST']) def uploadLogo(user_id): user = User.query.filter(User.id == user_id).first() f = request.files['logo'] basepath = os.path.dirname(__file__) # 当前文件所在路径 upload_path = os.path.join(basepath, 'static/uploads', f.filename) # 注意：没有的文件夹一定要先创建，不然会提示没有该路径 f.save(upload_path) user.logo = 'uploads/'+f.filename db.session.commit() return '{"url":"'+url_for('static',filename='uploads/'+f.filename)+'"}'; # 分类列表 @app.route('/classflyList/') def classflyList(): classfly = Classification.query.all() context = { 'classfly':classfly } return render_template('classflyList.html',**context) # 某个分类下的文章 @app.route('/classfly/<classification_id>') def classfly(classification_id): classflyList = Classification.query.all() classfly = Classification.query.filter(Classification.id == classification_id).first() context = { 'classfly': classfly, 'books':classfly.book, 'classflyList': classflyList } return render_template('classfly.html',**context) # 改密码 @app.route('/resetPassword/<user_id>', methods=['GET', 'POST']) @loginFirst def resetPassword(user_id): user = User.query.filter(User.id == user_id).first() if request.method == 'GET': return render_template('resetPassword.html') else: password = request.form.get('password') oldPassword = request.form.get('oldPassword') if(md5(oldPassword.encode("utf-8")).hexdigest()==user.password): user.password = md5(password.encode("utf-8")).hexdigest() db.session.commit() else: return '原密码有误'; return render_template('resetPassword.html') # 模糊查找 @app.route('/search', methods=['GET', 'POST']) def search(): qu = request.args.get('q') query = Book.query.filter( or_( Book.title.contains(qu), Book.content.contains(qu), ) ).order_by('-createdate').all() classfly = Classification.query.all() context = { 'books': query, 'classfly':classfly } return render_template('home.html', **context) # 首页 @app.route('/', methods=['GET', 'POST']) def index(): # context = { # 'userName' : "AllianceHacker", # 'toTime' : '11小时前', # 'title' : 'PHP是世界是最好的语言', # 'context' : 'PHP是世界是最好的语言,这是一个不需要有疑问的问题，谁不服可以来战啊！！！' # } books = Book.query.order_by('-createdate').all() classfly = Classification.query.all() context = { 'books': books, 'classfly':classfly } return render_template('home.html', **context) # 主函数 if __name__ == '__main__': app.run(debug=True)
