1、
参考地址:https://blog.csdn.net/Pansc2004/article/details/80494793
清除浏览器缓存,直接访问 http://localhost/event_manage/,发现无需登陆,也可以直接访问该网页。

Django中解决该问题的方法是,给对应的views.py中的方法加上装饰器 @login_required。
step1: 在views.py中加入如下代码
-
from django.shortcuts import render
-
from django.http import HttpResponse, HttpRequest, HttpResponseRedirect
-
from django.contrib import auth
-
from django.contrib.auth.decorators import login_required
-
-
-
-
-
-
-
-
-
return render(request, "index.html")
-
-
-
def login_action(request):
-
-
username = request.POST.get(‘username‘, ‘‘)
-
password = request.POST.get(‘password‘, ‘‘)
-
user = auth.authenticate(username=username, password=password)
-
-
request.session[‘user‘] = username
-
request.session[‘psw‘] = password
-
-
auth.login(request, user)
-
return HttpResponseRedirect(‘/event_manage/‘)
-
-
return render(request, ‘index.html‘, {‘wronglyInput‘: ‘用户名或密码输入错误!‘})
-
-
-
def event_manage(request):
-
username = request.session.get(‘user‘, ‘‘)
-
password = request.session.get(‘psw‘, ‘‘)
-
return render(request, "event_manage.html", {‘user‘: username, ‘psw‘: password})
step2: 重新尝试访问 http://localhost/event_manage/ ,已经不能登陆了

step3: 虽然访问被成功限制了,但我们希望是自动跳转到index页面,让用户输入账号和密码。 注意上面的路径,@login_required会将其设置到 /account/login/的路径上去,那么只要我们在urls.py中做相应的路径设置,让其跳转到index页面即可。
-
-
-
url(r‘^index/$‘, views.index),
-
url(r‘^admin/‘, admin.site.urls),
-
url(r‘^login_action/‘, views.login_action),
-
url(r‘^event_manage/‘, views.event_manage),
-
url(r‘^accounts/login/$‘, views.index),
-
step4: 再次运行,访问event_manage,跳转成功

django2给其它页面加上登陆校验
原文:https://www.cnblogs.com/yaok430/p/14420410.html