Flask -- 使用数据库(Sqlite3)、用户注册、登录注销、修改密码

---

# 使用sqlite数据库

import sqlite3
from contextlib import closing


app.config.update(
    DATABASE = 'my.db',      #相对于文件所在目录
    DEBUG=True,
)

def connect_db():
    return sqlite3.connect(app.config['DATABASE'])

def init_db():
    with closing(connect_db()) as db:
        with app.open_resource('schema.sql', 'r') as f:
            db.cursor().executescript(f.read())
        db.commit()

def get_db():
    db = connect_db()
    cur = db.cursor()
    return db, cur

---

# 用户注册

　from wtforms import Form, TextField, PasswordField, BooleanField, validators
　from passlib.hash import sha256_crypt

import gc


class RegistrationForm(Form):     使用flask-WTF表单系统，可以方便地使用逻辑（pip install flask-WTF）

    username = TextField('Username', [validators.Length(min=4, max=20)])
    email = TextField('Email', [validators.Length(min=6, max=50)])
    password = PasswordField('Password', [validators.Required(), validators.EqualTo('confirm', message='Passwords must match.')])
    confirm = PasswordField('Password Again')
    accept_tos = BooleanField("<small>I accept it</small>", [validators.Required()])


@app.route('/register/', methods=['POST', 'GET'])
def register():
    try:
        form = RegistrationForm(request.form)

        if request.method == 'POST' and form.validate():
            username = form.username.data
            email = form.email.data
            password = sha256_crypt.encrypt(str(form.password.data))    #对密码加密,生成一个hash值[每次调用生成不同的hash]（pip install passlib)

            db, cur = get_db()

            x = cur.execute(
                'SELECT * FROM users WHERE username = ?', [username])

            if x.fetchall():
                flash("That username is already taken, please choose another")
                return render_template('register.html', form=form)

            else:
                cur.execute("INSERT INTO users (username, password, email) VALUES(?,?,?)", [
                            username, password, email])
                db.commit()

                flash("Thanks for registering!")

                cur.close()
                db.close()
                gc.collect()      # collect garbage

                session['logged_in'] = True
                session['username'] = username

                return redirect(url_for('dashboard'))

        return render_template('register.html', form=form)   

    except Exception as e:
        return str(e)

#register.html

<div class="container" style>
    <h4>Welcome to register</h4>
    <br />
    {% from '_formhelpers.html' import render_field %}
    <form action="" method="post">
        {{ render_field(form.username) }}    
        {{ render_field(form.email) }}    
        {{ render_field(form.password) }}    
        {{ render_field(form.confirm) }}
        {{ render_field(form.accept_tos) }}

        <p><input type="submit" value="Register" /></p>
    </form>

    {% if error %}
        <p class="error"><strong>Error: </strong>{{ error }}</p>
    {% endif %}

</div>

# _formhelper.html

{% macro render_field(field) %}  宏逻辑，相当于一个函数

<dt>{{ field.label }}</dt>
<dd>{{ field(**kwargs) | safe }}
    {% if field.errors  %}
        <ul class="errors">
            {% for error in field.errors %}
            <li>{{ error }}</li>
            {% endfor %}
        </ul>
    {% endif %}
<dd>

{% endmacro %}

#用户登录

@app.route('/login/', methods=['POST', 'GET'])
def login():
    try:
        error = None
        if request.method == 'POST':

            username = request.form['username']
            password = request.form['password']

            db, cur = get_db()

            passwd_hash_tuple = cur.execute(
                'SELECT password FROM users WHERE username=?', [username]).fetchone()   # return a tuple

            if not passwd_hash_tuple:
                error = 'Invalid username'
            elif not sha256_crypt.verify(password, passwd_hash_tuple[0]):
                error = 'Invalid password'
            else:
                flash('Hey %s, you are in' % username)
                session['logged_in'] = True
                session['username'] = username
                return redirect(url_for('dashboard'))

        gc.collect()
        return render_template('login.html', error=error)

    except Exception as e:
        return str(e)

# login.html

<div class="container">
    {% if error %}
        <p class="alert alert-danger">{{ error }}</p>
    {% endif %}


    <h4>Please Login</h4>
    <form method="post" action="" class="form-inline">
        <input type="text" class="form-control" placeholder="username" name="username" value="{{ request.form.username }}" />
        <input type="password" class="form-control" placeholder="password" name="password" value="{{ request.form.password }}" />
        <input type="submit" class="btn btn-default" value="Login" />
    </form>

</div>

# 用户退出

@app.route('/logout/')
@login_required
def logout():
    session.pop('logged_in', None)
    flash("You have logged out")
    return redirect(url_for('dashboard'))