urlpatterns = [
 path('admin/', admin.site.urls),
 path('app01/', include('app01.urls'))
]
          

            
urlpatterns = [
 path('login/', views.login),
 path('index/', views.index),
]
          

            
# Create your views here.
from django.shortcuts import HttpResponse, render, redirect
def login(request):
 if request.method == 'GET':
  return render(request, 'login.html')
 elif request.method == 'POST':
  user = request.POST.get('username')
  pwd = request.POST.get('pwd')
  if user == 'song' and pwd == '123':
   # 往session里寫入數據的時候，Django會自動生成隨機碼，發送給cookie，然后自己保留一份跟cookie一一對應
   request.session['username'] = user
   request.session['is_login'] = True
   #設置session（同時對應的cookie）超時時間，按秒計算
   request.session.set_expiry(60)
   # 路徑已經要寫全，把/app01帶上，以前好像不帶是可以的
   return redirect('/app01/index/')
  else:
   return render(request, 'login.html')
def index(request):
 # 拿到cookie對應的隨機碼，來查找session里的is_login字段是否True，如果通過則表示通過
 if request.session.get('is_login', None):
  return render(request, 'index.html')
 else:
  return HttpResponse('滾')
def logout(request):
 # 清除當前對應session所有數據
 request.session.clear()
 # 路徑已經要寫全，把/app01帶上，以前好像不帶是可以的
 return redirect('/app01/login')
          

            
            
            

              登錄成功
            
            

              
                注銷
              
            
          

            
python manage.py makemigrations
python manage.py migrate
          

            
from django.db import models
# Create your models here.
class UserInfo(models.Model):
 username = models.CharField(max_length=16)
 password = models.CharField(max_length=32)
          

            
from django.contrib import admin
from django.urls import path,include
from app01 import views
from django.conf.urls import url
urlpatterns = [
 # path('login/', views.login),
 path('index/', views.index),
 # path('logout/', views.logout),
 # path('fm/', views.fm),
 path('aa/', views.aa),
 path('select/', views.select),
]
          

            
# Create your views here.
from django.shortcuts import HttpResponse, render, redirect
from django.views.decorators.csrf import csrf_exempt,csrf_protect
from app01 import models
from functools import wraps
#做session驗證的的裝飾器，
def checklogin(func):
 @wraps(func)
 def wrapper(request,*args,**kwargs):
  if request.session.get('is_login') == '1':
   return func(request,*args,**kwargs)
  else:
   return redirect('/app01/aa')
 return wrapper

def aa(requrst):
 if requrst.method == 'GET':
  print('get')
  return render(requrst, 'aa.html')
 elif requrst.method == 'POST':
  username = requrst.POST.get('username')
  pwd = requrst.POST.get('password')
  user = models.UserInfo.objects.filter(username=username,password=pwd)
  # print(type(pwd))
  # print(models.UserInfo.objects.filter(username=username).values('password'))
  if user:
   #如果輸入的賬戶名跟數據庫中的賬戶名密碼相匹配就忘session信息里寫入一條is_login的數據
   #同時隨機生成的字符串ID也寫到cookie里當做sessionid使用
   requrst.session['is_login'] = '1'
   return redirect('/app01/index')
  return redirect('/app01/aa')

#在訪問頁面的時候先做驗證，拿自己的cookie里的sessionid去跟服務器端的session_key做對比
#對比認證通過就允許訪問
@checklogin
def index(request):
 return render(request,'index.html')
          

            
            
            

              aa頁面
            
            

              
 {% csrf_token %}
  
              

                用戶名：
 
                
              
              

                密碼：
 
                
              
              
            
          

            
            
            

              登錄成功
            
            

              
                注銷