Django book2.0 contact表单

根据Django book 2.0  编辑视图函数contact，模板contact_form.html，配置urls.py

启用Firefox浏览器，键入127.0.0.1:8000/contact

不写入任何字符，直接提交，页面显示

Forbidden (403)

CSRF verification failed. Request aborted.

Help

Reason given for failure:

    CSRF token missing or incorrect.
    

In general, this can occur when there is a genuine Cross Site Request Forgery, or whenDjango's CSRF mechanism has not been used correctly. For POST forms, you need to ensure:

• Your browser is accepting cookies.
• The view function uses RequestContext for the template, instead of Context.
• In the template, there is a {% csrf_token %} template tag inside each POST form that targets an internal URL.
• If you are not using CsrfViewMiddleware, then you must usecsrf_protect on any views that use thecsrf_token template tag, as well as those that accept the POST data.

You're seeing the help section of this page because you haveDEBUG = True in your Django settings file. Change that toFalse, and only the initial error message will be displayed.

You can customize this page using the CSRF_FAILURE_VIEW setting.

由于使用request.POST获取数据，我们需保证以下四点：

• Your browser is accepting cookies.
• The view function uses RequestContext for the template, instead of Context.
• In the template, there is a {% csrf_token %} template tag inside each POST form that targets an internal URL.
• If you are not using CsrfViewMiddleware, then you must usecsrf_protect on any views that use thecsrf_token template tag, as well as those that accept the POST data.

1.直接忽略了

2.根据文档描述，视图函数需添加以下代码（带**）：

**from django.template import RequestContext**
························ 

     return render_to_response('contact_form.html',
             {
             'errors':errors,
             'subject':request.POST.get('subject',''),
             'message':request.POST.get('message',''),
             'email':request.POST.get('email',''),
             },
             **context_instance = RequestContext(request)**)
                 

3.contact_form.html模板需添加标签{% csrf_token %}:

    <form action = '/contact/' method = 'post'>
        **{% csrf_token %}**
        <p>Subject:<input type="text" name="subject",value = "{{ subject }}"></p>
        <p>Your e-mail (optional):<input type="text" name="email",value = "{{ email }}"></p>
        <p>Message:<textarea name="message" rows="10" cols="50">{{ message }}</textarea></p>
        <input type="submit" value="Submit">
    </form>

4.也是忽略了。

这样修改之后，键入http://127.0.0.1:8000/contact/，不写入任何字符直接提交，页面显示：

Contact us

• Enter a subject.
• Enter a message.

Subject:

Your e-mail (optional):

Message: