表单扩展 Flask
-WTF
文档:
https://flask-wtf.readthedocs.io/en/stable/ 安装pip install Flask-WTF
可以进行csrf验证
代码示例
1、定义模型类 视图使用
from flask import (
Flask,
render_template,
session,
url_for,
redirect
)
from flask_wtf import FlaskForm
from wtforms import StringField, SubmitField, PasswordField
from wtforms.validators import DataRequired, EqualTo
app = Flask(__name__)
app.secret_key = "1231safdasdf"
class RegisterForm(FlaskForm):
# 标签 验证器
user_name = StringField(label="用户名", validators=[DataRequired("用户名不能为空")])
password = PasswordField(label="密码", validators=[DataRequired("密码不能为空")])
re_password = PasswordField(label="密码", validators=[DataRequired("密码不能为空"),
EqualTo("password", "两次密码不一致")])
submit = SubmitField(label="提交")
@app.route("/register", methods=["GET", "POST"])
def register():
# 如果是POST提交,前端数据会放到form对象中
form = RegisterForm()
# 验证数据,验证合格后再进行操作
if form.validate_on_submit():
username = form.user_name.data
pwd = form.password.data
re_pwd = form.re_password.data
session["user_name"] = username
return redirect(url_for("index"))
return render_template("register.html", form=form)
@app.route("/")
def index():
username = session.get("user_name")
return "注册成功:username: {}".format(username)
if __name__ == '__main__':
app.run()
2、模板使用
<form action="" method="POST">
{{ form.csrf_token }}
{{ form.user_name.label }}
<p>{{ form.user_name }}</p>
{% for msg in form.user_name.errors %}
<p>{{ msg }}</p>
{% endfor %}
{{ form.password.label }}
<p>{{ form.password }}</p>
{% for msg in form.password.errors %}
<p>{{ msg }}</p>
{% endfor %}
{{ form.re_password.label }}
<p>{{ form.re_password }}</p>
{% for msg in form.re_password.errors %}
<p>{{ msg }}</p>
{% endfor %}
{{ form.submit }}
</form>
渲染效果