密码保护

1.更新User对象，设置对内的_password

class User(db.Model):

    __tablename__ = 'user' 

    _password = db.Column(db.String(200), nullable=False) #内部使用

2.编写对外的password

from werkzeug.security import generate_password_hash, check_password_hash

    @property

    def password(self):  #外部使用，取值

        return self._password

    @password.setter

    def password(self, row_password):#外部使用，赋值

        self._password = generate_password_hash(row_password)

3.密码验证方法：

    def check_password(self, row_password): #密码验证

        result = check_password_hash(self._password,row_password)

        return result

4.登录验证：

        password1 = request.form.get('password')

        user = User.query.filter(User.username == username).first()

        if user:

            if user.check_password(password1):

from flask import Flask, render_template, request, redirect, url_for, session
from flask_sqlalchemy import SQLAlchemy
import config
from functools import wraps
from  datetime import datetime
from sqlalchemy import or_,and_
from werkzeug.security import generate_password_hash,check_password_hash

app = Flask(__name__)
app.config['SECRET_KEY'] = '123456'
app.config.from_object(config)
db = SQLAlchemy(app)


class User(db.Model):
    __tablename__ = 'user'
    id = db.Column(db.Integer, primary_key=TabError, autoincrement=True)
    username = db.Column(db.String(20), nullable=False)
    _password = db.Column(db.String(200), nullable=False)#内部使用
    # nickname = db.Column(db.String(20))

    @property
    def password(self): #外部使用
        return self._password

    @password.setter
    def password(self,row_password):
        self._password=generate_password_hash(row_password)

    def check_password(self,row_password): #反编译密码，进行检验
        result=check_password_hash(self._password,row_password)
        return result




class Post(db.Model):
    __tablename__ = 'post'
    id = db.Column(db.Integer, primary_key=TabError, autoincrement=True)
    title = db.Column(db.String(100), nullable=False)
    detail = db.Column(db.Text, nullable=False)
    creat_time = db.Column(db.DateTime, default=datetime.now)
    author_id = db.Column(db.Integer, db.ForeignKey('user.id'))
    author = db.relationship('User', backref=db.backref('post'))


class Comment(db.Model):
    __tablename__ = 'comment'
    id = db.Column(db.Integer, primary_key=True, autoincrement=True)
    author_id = db.Column(db.Integer, db.ForeignKey('user.id'))
    post_id = db.Column(db.Integer, db.ForeignKey('post.id'))
    creat_time = db.Column(db.DateTime, default=datetime.now)
    detail = db.Column(db.Text, nullable=False)
    post = db.relationship('Post', backref=db.backref('comments', order_by=creat_time.desc))
    author = db.relationship('User', backref=db.backref('comments'))


db.create_all()


# 查询删除
# user = User.query.filter(User.username == 'lin').first()
# db.session.delete(user)
# db.session.commit()

# 修改
# user = User.query.filter(User.username == 'lin').first()
# user.password = '1234'
# print(user.username,user.password)
# db.session.commit()

# 增加
# user = User(username = 'lin',password = 'lin')
# db.session.add(user)
# db.session.commit()




@app.route('/')
def jianshu():
    context = {
        'post': Post.query.order_by('-creat_time').all()
    }
    return render_template('jianshu.html', **context)


@app.route("/login/", methods=['GET', 'POST'])
def login():
    if request.method == 'GET':
        return render_template('login.html')
    else:
        username = request.form.get('username')
        password = request.form.get('password')
        user = User.query.filter(User.username == username).first()
        if user:
            if user.check_password(password):
                session['user'] = username
                session['userid']=user.id
                session.permanent = True
                return redirect(url_for('jianshu'))
            else:
                return 'password error'
        else:
            return u'error username or password'


@app.route("/enroll/", methods=['GET', 'POST'])
def enroll():
    if request.method == 'GET':
        return render_template('enroll.html')
    else:
        username = request.form.get('username')
        password = request.form.get('password')
        user = User.query.filter(User.username == username).first()
        if user:
            return 'username exited'
        else:
            user = User(username=username, password=password)
            db.session.add(user)
            db.session.commit()
            return redirect(url_for('login'))


@app.route('/detail/<post_id>')
def detail(post_id):
    post = Post.query.filter(Post.id == post_id).first()
    return render_template('detail.html', pos=post)  # 页面上用pos，函数用post，传递到pos


@app.context_processor
def mycontext():
    usern = session.get('user')
    if usern:
        user=User.query.filter(User.username==usern).first()
        return {'username': usern,'user':user}
    else:
        return {}


@app.route('/logout/')
def logout():
    session.clear()
    return redirect(url_for('jianshu'))


def loginFirst(func):
    @wraps(func)
    def wrapper(*args, **kwargs):
        if session.get('user'):
            return func(*args, **kwargs)
        else:
            return redirect(url_for('login'))

    return wrapper


@app.route("/post/", methods=['GET', 'POST'])
@loginFirst
def post():
    if request.method == 'GET':
        return render_template('post.html')
    else:
        title = request.form.get('title')
        detail = request.form.get('detail')
        author_id = User.query.filter(User.username == session.get('user')).first().id
        post = Post(title=title, detail=detail, author_id=author_id)
        db.session.add(post)
        db.session.commit()
        return redirect(url_for('jianshu'))


@app.route('/comment/', methods=['POST'])
@loginFirst
def comment():
    comment = request.form.get('new_comment')
    pos_id = request.form.get('post_id')
    auth_id = User.query.filter(User.username == session.get('user')).first().id
    comm = Comment(author_id=auth_id, post_id=pos_id, detail=comment)
    db.session.add(comm)
    db.session.commit()
    return redirect(url_for('detail', post_id=pos_id))


@app.route('/username/<user_id>/<tag>')
@loginFirst
def usercenter(user_id, tag):
    user = User.query.filter(User.id == user_id).first()
    context = {
        'user': user,
        'post': user.post,
        'comments': user.comments
    }
    if tag == '1':
        return render_template('usercenter1.html', **context)
    elif tag == '2':
        return render_template('usercenter2.html', **context)
    else:
        return render_template('usercenter3.html', **context)


@app.route('/search/')
def search():
    qu = request.args.get('q')
    pos = Post.query.filter(
        or_(
            Post.title.contains(qu),
            Post.detail.contains(qu)
        )
    ).order_by('-creat_time')
    return render_template('jianshu.html', post=pos)


if __name__ == '__main__':
    app.run(debug=True)