*session是什么?
http无状态, 用于会话控制,保存会话状态,存放在服务端
*session和cookie的区别和练习
都是保存会话的机制,cookie存放于客户端,可以被篡改,session放在服务端,安全性大大提高,但会增加服务器额外开销,存放在服务器的内存中。
session id 存放在cookie
*为什么使用session
为了保存会话
*django中使用session
settings.py中默认设置支持session
INSTALLED_APPS = [
'django.contrib.admin',
'django.contrib.auth',
'django.contrib.contenttypes',
'django.contrib.sessions',#
'django.contrib.messages',
'django.contrib.staticfiles',
'blog'
]
MIDDLEWARE_CLASSES = [
'django.middleware.security.SecurityMiddleware',
'django.contrib.sessions.middleware.SessionMiddleware',#
'django.middleware.common.CommonMiddleware',
'django.middleware.csrf.CsrfViewMiddleware',
'django.contrib.auth.middleware.AuthenticationMiddleware',
'django.contrib.auth.middleware.SessionAuthenticationMiddleware',#
'django.contrib.messages.middleware.MessageMiddleware',
'django.middleware.clickjacking.XFrameOptionsMiddleware',
]
request.session['name'] = 'kaka'
print(request.session.get('name'))