re_path( 'app02/' , include( 'app02.urls' ) ) , from django. urls import path, re_path, include
from app02 import viewsurlpatterns = [ path( 'home/' , views. home) , path( 'article_list/' , views. article_list) , path( 'add_article/' , views. add_article) , path( 'upload_image/' , views. upload_image) ,
]
<! DOCTYPE html > < htmllang = " en" > < head> < metacharset = " UTF-8" > < title> </ title> < scriptsrc = " {% static 'js/jquery.min.js' %}" > </ script> < linkhref = " {% static 'bootstrap/css/bootstrap.min.css' %}" rel = " stylesheet" > < scriptsrc = " {% static 'bootstrap/js/bootstrap.min.js' %}" > </ script> < scriptsrc = " {% static 'layer/layer.js' %}" > </ script> </ head> < body> < navclass = " navbar navbar-inverse" > < divclass = " container-fluid" > < divclass = " navbar-header" > < buttontype = " button" class = " navbar-toggle collapsed" data-toggle = " collapse" data-target = " #bs-example-navbar-collapse-1" aria-expanded = " false" > < spanclass = " sr-only" > </ span> < spanclass = " icon-bar" > </ span> < spanclass = " icon-bar" > </ span> < spanclass = " icon-bar" > </ span> </ button> < aclass = " navbar-brand" href = " #" > </ a> </ div> < divclass = " collapse navbar-collapse" id = " bs-example-navbar-collapse-1" > < ulclass = " nav navbar-nav" > < liclass = " active" > < ahref = " #" > < spanclass = " sr-only" > </ span> </ a> </ li> < li> < ahref = " #" > </ a> </ li> < liclass = " dropdown" > < ahref = " #" class = " dropdown-toggle" data-toggle = " dropdown" role = " button" aria-haspopup = " true" aria-expanded = " false" > < spanclass = " caret" > </ span> </ a> < ulclass = " dropdown-menu" > < li> < ahref = " #" > </ a> </ li> < li> < ahref = " #" > </ a> </ li> < li> < ahref = " #" > </ a> </ li> < lirole = " separator" class = " divider" > </ li> < li> < ahref = " #" > </ a> </ li> < lirole = " separator" class = " divider" > </ li> < li> < ahref = " #" > </ a> </ li> </ ul> </ li> </ ul> < formclass = " navbar-form navbar-left" > < divclass = " form-group" > < inputtype = " text" class = " form-control" placeholder = " Search" > </ div> < buttontype = " submit" class = " btn btn-default" > </ button> </ form> < ulclass = " nav navbar-nav navbar-right" > < listyle = " line-height : 50px; " > < imgclass = " media-object" src = " /media/{{ article.blog.userinfo.avatar }}" style = " width : 100px; " alt = " ..." > < imgsrc = " /media/{{ cur_avatar }}" style = " width : 50px; height : 36px; " class = " onImg" alt = " " > </ li> < li> < ahref = " #" > </ a> </ li> < liclass = " dropdown" > < ahref = " #" class = " dropdown-toggle" data-toggle = " dropdown" role = " button" aria-haspopup = " true" aria-expanded = " false" > < spanclass = " caret" > </ span> </ a> < ulclass = " dropdown-menu" > < li> < ahref = " #" data-toggle = " modal" data-target = " .bs-example-modal-lg" > </ a> </ li> < li> < ahref = " #" > </ a> </ li> < li> < ahref = " /logout/" > </ a> </ li> < li> < ahref = " #" > </ a> </ li> </ ul> </ li> < li> < ahref = " /login/" > </ a> </ li> < li> < ahref = " /register/" > </ a> </ li> </ ul> < divclass = " modal fade bs-example-modal-lg" tabindex = " -1" role = " dialog" aria-labelledby = " myLargeModalLabel" > < divclass = " modal-dialog modal-lg" role = " document" > < divclass = " modal-content" > < divclass = " row" > < h1class = " text-center" > </ h1> < divclass = " col-md-8 col-md-offset-2" > < divclass = " form-group" > < inputtype = " text" readonly value = " {{ request.session.username }}" class = " form-control" > </ div> < divclass = " form-group" > < inputtype = " password" id = " old_password" class = " form-control" msg = " 原密码必须输入" > </ div> < divclass = " form-group" > < inputtype = " password" id = " new_password" class = " form-control" msg = " 原密码必须输入" > </ div> < divclass = " form-group" > < inputtype = " password" id = " re_password" class = " form-control" msg = " 原密码必须输入" > </ div> < divclass = " form-group" > < inputtype = " button" value = " 修改密码" class = " btn btn-primary btn-block btn_password" > </ div> </ div> </ div> </ div> </ div> </ div> </ div> </ div> </ nav> < divclass = " container-fluid" > < divclass = " row" > < divclass = " col-md-3" > < divclass = " list-group" > < ahref = " #" class = " list-group-item active" > </ a> < ahref = " /app02/article_list/" class = " list-group-item" > </ a> < ahref = " #" class = " list-group-item" > </ a> < ahref = " #" class = " list-group-item" > </ a> < ahref = " #" class = " list-group-item" > </ a> </ div> </ div> < divclass = " col-md-9" > < divclass = " panel panel-info" > < divclass = " panel-heading" > </ div> < divclass = " panel-body" > < divclass = " jumbotron" > < h1> </ h1> < p> </ p> < p> < aclass = " btn btn-primary btn-lg" href = " #" role = " button" > </ a> </ p> </ div> < divclass = " row" > < divclass = " col-sm-6 col-md-4" > < divclass = " thumbnail" > < imgsrc = " https://img2.baidu.com/it/u=3323311628,2330835932&fm=253&app=138&size=w931&n=0&f=JPEG&fmt=auto?sec=1692464400&t=3cf590e7ea88465e48ef5170f7c70884" alt = " ..." > < divclass = " caption" > < h3> </ h3> < p> </ p> < p> < ahref = " #" class = " btn btn-primary" role = " button" > </ a> < ahref = " #" class = " btn btn-default" role = " button" > </ a> </ p> </ div> </ div> </ div> < divclass = " col-sm-6 col-md-4" > < divclass = " thumbnail" > < imgsrc = " https://img2.baidu.com/it/u=3323311628,2330835932&fm=253&app=138&size=w931&n=0&f=JPEG&fmt=auto?sec=1692464400&t=3cf590e7ea88465e48ef5170f7c70884" alt = " ..." > < divclass = " caption" > < h3> </ h3> < p> </ p> < p> < ahref = " #" class = " btn btn-primary" role = " button" > </ a> < ahref = " #" class = " btn btn-default" role = " button" > </ a> </ p> </ div> </ div> </ div> < divclass = " col-sm-6 col-md-4" > < divclass = " thumbnail" > < imgsrc = " https://img2.baidu.com/it/u=3323311628,2330835932&fm=253&app=138&size=w931&n=0&f=JPEG&fmt=auto?sec=1692464400&t=3cf590e7ea88465e48ef5170f7c70884" alt = " ..." > < divclass = " caption" > < h3> </ h3> < p> </ p> < p> < ahref = " #" class = " btn btn-primary" role = " button" > </ a> < ahref = " #" class = " btn btn-default" role = " button" > </ a> </ p> </ div> </ div> </ div> </ div> </ div> </ div> </ div> </ div> </ div> </ body> </ html> def home ( request) : return render( request, 'backend/home.html' , locals ( ) )
{ % extends 'backend/home.html' % } { % block content % } < h2 class = "text-center" > 文章列表< / h2> < form action= "" > < div class = "form-group" > 文章标题< input type= "text" id= "title" class = "form-control" > < / div> < div class = "form-group" > 文章分类< select name= "" id= "cate" class = "form-control" > { % for cate in cate_list % } < option value= "{{ cate.pk }}" > { { cate. name } } < / option> { % endfor % } < / select> < / div> < div class = "form-group" > < p> 文章标签< / p> { % for tags in tags_list % } { { tags. name } } & nbsp; < input type= "checkbox" value= "{{ tags.pk }}" name= "tags" > & nbsp; & nbsp; { % endfor % } < / div> < div class = "form-group" > 文章内容< textarea id= "editor_id" name= "content" style= "width:100%;height:300px;" > < / textarea> < / div> < div class = "form-group" > < input type= "button" id= "title" value= "提交" class = "btn btn-success btn-block btn_article" > < / div> < / form> { % endblock % } { % block js % } < script charset= "utf-8" src= "/static/kindeditor/kindeditor-all.js" > < / script> < script charset= "utf-8" src= "/static/kindeditor/lang/zh-CN.js" > < / script> < script> KindEditor. ready ( function ( K ) { window. editor = K . create ( '#editor_id' , { height : '500px' , items : [ 'source' , '|' , 'undo' , 'redo' , '|' , 'preview' , 'print' , 'template' , 'code' , 'cut' , 'copy' , 'paste' , 'plainpaste' , 'wordpaste' , '|' , 'justifyleft' , 'justifycenter' , 'justifyright' , 'justifyfull' , 'insertorderedlist' , 'insertunorderedlist' , 'indent' , 'outdent' , 'subscript' , 'superscript' , 'clearhtml' , 'quickformat' , 'selectall' , '|' , 'fullscreen' , '/' , 'formatblock' , 'fontname' , 'fontsize' , '|' , 'forecolor' , 'hilitecolor' , 'bold' , 'italic' , 'underline' , 'strikethrough' , 'lineheight' , 'removeformat' , '|' , 'image' , 'multiimage' , 'flash' , 'media' , 'insertfile' , 'table' , 'hr' , 'emoticons' , 'baidumap' , 'pagebreak' , 'anchor' , 'link' , 'unlink' , '|' , 'about' ] , colorTable : [ [ '#E53333' , '#E56600' , '#FF9900' , '#64451D' , '#DFC5A4' , '#FFE500' ] , [ '#009900' , '#006600' , '#99BB00' , '#B8D100' , '#60D978' , '#00D5FF' ] , [ '#337FE5' , '#003399' , '#4C33E5' , '#9933E5' , '#CC33E5' , '#EE33EE' ] , [ '#FFFFFF' , '#CCCCCC' , '#999999' , '#666666' , '#333333' , '#000000' ] ] , resizeType : 0 , uploadJson : '/app02/upload_image/' , extraFileUploadParams : { csrfmiddlewaretoken : '{{ csrf_token }}' } , } ) ; } ) ; $ ( ".btn_article" ) . click ( function ( ) { let title = $ ( "#title" ) . val ( ) ; let cate_id = $ ( "#cate" ) . val ( ) ; tags_arr = [ ] var tags = $ ( "input[name='tags']:checked" ) ; $. each ( tags, function ( index, value ) { console. log ( index, $ ( this ) . val ( ) ) ; tags_arr. push ( $ ( this ) . val ( ) ) ; } ) ; console. log ( tags_arr) ; var tags_str = tags_arr. join ( ',' ) console. log ( tags_str) ; editor. sync ( ) ; content = $ ( '#editor_id' ) . val ( ) ; console. log ( content) $. ajax ( { url : '' , type : 'post' , data : { title : title, cate_id : cate_id, tags : tags_str, content : content, csrfmiddlewaretoken : '{{ csrf_token }}' , } , success : function ( res ) { if ( res. code === 200 ) { layer. msg ( res. msg, { } , function ( ) { location. href = '/app02/article_list/' } ) ; } else { layer. msg ( res. msg, { } ) ; } } } ) ; } ) ; < / script>
{ % endblock % } def article_list ( request) : articles_list = models. Article. objects. all ( ) return render( request, 'backend/article_list.html' , locals ( ) )
{ % extends 'backend/home.html' % } { % block content % } < h3 class = "text-center" > 添加文章< / h3> < form action= "" > < div class = "form-group" > 文章标题：< input type= "text" id= "title" class = "form-control" > < / div> < div class = "form-group" > 文章分类：< select name= "" id= "cate" class = "form-control" > { % for category in category_list % } < option value= "{{ category.pk }}" > { { category. name } } < / option> { % endfor % } < / select> < / div> < div class = "form-group" > < p> 文章标签：< / p> { % for tags in tags_list % } { { tags. name } } & nbsp; < input type= "checkbox" id= "title" name= "tags" value= "{{ tags.pk }}" style= "margin-right: 10px;" > { % endfor % } < / div> < div class = "form-group" > 文章内容：< textarea id= "editor_id" name= "content" style= "width:100%;height:400px;" > < / textarea> < / div> < div class = "form-group" > < ! -- type= "submit" 会自动提交表单 -- > < ! -- < button> < / button> 会自动提交表单，注意：当写在外面的时候才不会自动提交form表单 -- > { # < input type= "submit" value= "提交" id= "title" class = "btn btn-success btn-block" > #} < ! -- type= "button" 不会自动提交表单 -- > < input type= "button" value= "提交" id= "title" class = "btn btn-success btn-block btn_article" > < / div> < / form> { % endblock % } def add_article ( request) : user_obj = models. UserInfo. objects. filter ( pk= request. session. get( 'id' ) ) . first( ) if not user_obj: return redirect( '/login/' ) blog = user_obj. blogcategory_list = models. Category. objects. all ( ) tags_list = models. Tag. objects. all ( ) back_dict = { 'code' : 200 , 'msg' : '添加成功' , 'data' : [ ] } if request. method == 'POST' : title = request. POST. get( 'title' ) cate_id = request. POST. get( 'cate_id' ) content = request. POST. get( 'content' ) tags = request. POST. get( 'tags' ) tags_list = tags. split( ',' ) if not title: back_dict[ 'code' ] = 1500 back_dict[ 'msg' ] = '标题必须有' return JsonResponse( back_dict) if not cate_id: back_dict[ 'code' ] = 1501 back_dict[ 'msg' ] = '分类必须选择' return JsonResponse( back_dict) if not tags: back_dict[ 'code' ] = 1502 back_dict[ 'msg' ] = '标签必须选择' return JsonResponse( back_dict) if not content: back_dict[ 'code' ] = 1503 back_dict[ 'msg' ] = '内容不能为空' return JsonResponse( back_dict) '''1.摘要截取的问题2.xss攻击的问题----->原理：有了script标签------>把提交过来的内容过滤出script标签，然后做删除解决方法：1.使用正则匹配 script，匹配到之后，做删除，这个方法很麻烦，不推荐2.利用第三方模块来处理：bs4模块pip install bs4BeautifulSoup它是用在爬虫里面，它能够筛选数据，清晰html数据BeautifulSoup('', 'html.parser')使用lxml的话需要安装 pip install lxmlBeautifulSoup('', 'lxml')''' from bs4 import BeautifulSoupsoup = BeautifulSoup( content, 'html.parser' ) for tag in soup. find_all( ) : if tag. name == 'script' : tag. decompose( ) desc = soup. text[ : 100 ] article_obj = models. Article. objects. create( title= title, content= str ( soup) , desc= desc, category_id= cate_id, blog= blog) article_tag_list = [ ] for i in tags_list: article_tag_obj = models. Article2Tag( article_id= article_obj. pk, tag_id= i) article_tag_list. append( article_tag_obj) models. Article2Tag. objects. bulk_create( article_tag_list) return JsonResponse( back_dict) return render( request, 'backend/add_article.html' , locals ( ) )
{ % extends 'backend/home.html' % } { % block content % } < h3 class = "text-center" > 添加文章< / h3> < form action= "" > < div class = "form-group" > 文章标题：< input type= "text" id= "title" class = "form-control" > < / div> < div class = "form-group" > 文章分类：< select name= "" id= "cate" class = "form-control" > { % for category in category_list % } < option value= "{{ category.pk }}" > { { category. name } } < / option> { % endfor % } < / select> < / div> < div class = "form-group" > < p> 文章标签：< / p> { % for tags in tags_list % } { { tags. name } } & nbsp; < input type= "checkbox" id= "title" name= "tags" value= "{{ tags.pk }}" style= "margin-right: 10px;" > { % endfor % } < / div> < div class = "form-group" > 文章内容：< textarea id= "editor_id" name= "content" style= "width:100%;height:400px;" > < / textarea> < / div> < div class = "form-group" > < ! -- type= "submit" 会自动提交表单 -- > < ! -- < button> < / button> 会自动提交表单，注意：当写在外面的时候才不会自动提交form表单 -- > { # < input type= "submit" value= "提交" id= "title" class = "btn btn-success btn-block" > #} < ! -- type= "button" 不会自动提交表单 -- > < input type= "button" value= "提交" id= "title" class = "btn btn-success btn-block btn_article" > < / div> < / form> { % endblock % } { % block js % } { % load static % } < script charset= "utf-8" src= "{% static 'kindeditor/kindeditor-all.js' %}" > < / script> < script charset= "utf-8" src= "{% static 'kindeditor/lang/zh-CN.js' %}" > < / script> < script> KindEditor. ready ( function ( K ) { window. editor = K . create ( '#editor_id' , { height : '300px' , items : [ 'source' , '|' , 'undo' , 'redo' , '|' , 'preview' , 'print' , 'template' , 'code' , 'cut' , 'copy' , 'paste' , 'plainpaste' , 'wordpaste' , '|' , 'justifyleft' , 'justifycenter' , 'justifyright' , 'justifyfull' , 'insertorderedlist' , 'insertunorderedlist' , 'indent' , 'outdent' , 'subscript' , 'superscript' , 'clearhtml' , 'quickformat' , 'selectall' , '|' , 'fullscreen' , '/' , 'formatblock' , 'fontname' , 'fontsize' , '|' , 'forecolor' , 'hilitecolor' , 'bold' , 'italic' , 'underline' , 'strikethrough' , 'lineheight' , 'removeformat' , '|' , 'image' , 'multiimage' , 'flash' , 'media' , 'insertfile' , 'table' , 'hr' , 'emoticons' , 'baidumap' , 'pagebreak' , 'anchor' , 'link' , 'unlink' , '|' , 'about' ] , resizeType : 0 , colorTable : [ [ '#E53333' , '#E56600' , '#FF9900' , '#64451D' , '#DFC5A4' , '#FFE500' ] , [ '#009900' , '#006600' , '#99BB00' , '#B8D100' , '#60D978' , '#00D5FF' ] , [ '#337FE5' , '#003399' , '#4C33E5' , '#9933E5' , '#CC33E5' , '#EE33EE' ] , [ '#FFFFFF' , '#CCCCCC' , '#999999' , '#666666' , '#333333' , '#000000' ] , ] , uploadJson : '/upload_image/' , extraFileUploadParams : { csrfmiddlewaretoken : '{{ csrf_token }}' } , } ) ; } ) ; $ ( ".btn_article" ) . click ( function ( ) { editor. sync ( ) ; let title = $ ( "#title" ) . val ( ) ; let cate = $ ( "#cate" ) . val ( ) ; let tags = $ ( "input[name='tags']:checkbox" ) ; let tags_arr = [ ] $. each ( tags, function ( index, value ) { tags_arr. push ( $ ( this ) . val ( ) ) ; } ) ; console. log ( tags_arr) ; var tags_str = tags_arr. join ( ',' ) ; console. log ( tags_str) ; { #html = document. getElementById ( 'editor_id' ) . value; { #html = K ( '#editor_id' ) . val ( ) ; let content = $ ( "#editor_id" ) . val ( ) ; console. log ( content) ; $. ajax ( { url : '' , type : 'post' , data : { title : title, cate : cate, tags : tags_str, content : content, csrfmiddlewaretoken : '{{ csrf_token }}' } , success : function ( res ) { if ( code === 200 ) { layer. msg ( res. msg, { } , function ( ) { location. href = '/app02/article_list/' ; } ) ; } else { layer. msg ( res. msg, { } ) ; } } } ) ; } ) ; < / script>
{ % endblock % }
def upload_image ( request) : '''返回格式：josn//成功时{"error" : 0,"url" : "http://www.example.com/path/to/file.ext"}//失败时{"error" : 1,"message" : "错误信息"}''' if request. method == 'POST' : file_obj = request. FILES. get( 'imgFile' ) import osfrom django. conf import settingsBASE_DIE = os. path. join( settings. BASE_DIR, 'media' , 'article_img' ) file_name = os. path. join( BASE_DIE, file_obj. name) with open ( file_name, 'wb' ) as f: for line in file_obj: f. write( line) return JsonResponse( { "error" : 0 , "url" : "/media/article_img/%s" % file_obj. name} ) import uuidnew_str = str ( uuid. uuid4( ) ) new_uuid = new_str. replace( '-' , '' ) new_file_name = new_uuid + '.' + file_obj. name. rsplit( '.' ) [ - 1 ] new_file = os. path. join( BASE_DIE, new_file_name) with open ( new_file, 'wb' ) as f: for line in file_obj: f. write( line) return JsonResponse( { "error" : 0 , "url" : "/media/article_img/%s" % new_file_name} )
