MIDDLEWARE = [
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
]

from django.utils.deprecation import MiddlewareMixin
​
​
class Md1(MiddlewareMixin):
​
    def process_request(self, request):
        print("Md1请求")
        # return HttpResponse("Md1中断")    # 拦截
​
    def process_response(self, request, response):
        print("Md1返回")
        return response
​
​
class Md2(MiddlewareMixin):
​
    def process_request(self, request):
        print("Md2请求")
        # return HttpResponse("Md2中断")
​
    def process_response(self, request, response):
        print("Md2返回")
        return response

MIDDLEWARE = [
    ...
    'app01.mdws.Md1',
    'app01.mdws.Md2'
]

# path('index/', views.index),
​
​
def index(request):
    print("index 视图函数执行...")
    return HttpResponse("hello yuan")

# (1) 设置cookie：
res = HttpResponse(...) 或 rep ＝ render(request, ...) 或 rep ＝ redirect() 
res.set_cookie(key,value,max_age...)
res.set_signed_cookie(key,value,salt='加密盐',...)　
# (2) 获取cookie：
request.COOKIES     request.get_signed_cookie('xx',salt='xxxxxx')　　
# (3) 删除cookie
response.delete_cookie("cookie_key",path="/",domain=name).

# 认证模块
from django.contrib import auth
# 对应数据库用户表,可以继承扩展
from django.contrib.auth.models import User #这张表便是auth_user表1.

create() # 创建一个普通用户，密码是明文的。
create_user() # 创建一个普通用户，密码是密文的。
create_superuser() # 与create_user() 相同，但是设置is_staff 和is_superuser 为True。
​
set_password(*raw_password*)
# 设置用户的密码为给定的原始字符串，并负责密码的。 不会保存User对象。当None为raw_password时，密码将设置为一个不可用的密码。
check_password(*raw_password*)
# 如果给定的raw_password是用户的真实密码，则返回True，可以在校验用户密码时使用。

auth.authenticate(username,password) 
# 将输入的密码转为密文去认证，认证成功返回用户对象，失败则返回None

from django.contrib import auth
# 该函数接受一个HttpRequest对象，以及一个认证了的User对象。此函数使用django的session框架给某个已认证的用户附加上session id等信息。
auth.login() 
# 该函数接受一个HttpRequest对象，无返回值。当调用该函数时，当前请求的session信息会全部清除。该用户即使没有登录，使用该函数也不会报错。
auth.logout() 

def index(request):
    # request.user:当前登录对象
    '''
        1. 在AuthenticationMiddleware中间件的process_request方法中取user_id
            user_id = request.session.get('user_id')
        2.  导入User表 from django.contrib.auth.models import User
            user = User.object.get(pk=user_id)
            if user:
                request.user = user
            else:
                # 取不到返回一个匿名用户 所有属性都为零值（空或者None）
                request.user = AnonymousUser()
        因为是在中间件中完成因此在任何视图函数中都可以使用request.user
        只要完成了登录即auth.login(request, user) request.user就是登录对象
        如果没有登录过或者失败，那就是匿名对象
    '''
    if request.user.id:  # 随便取request.user.name
        return HttpResponse('登陆成功')
    else:
        return HttpResponse('请先去登录')
def login(request):
    if request.method == 'GET':
        return render(request, 'login.html')
    else:
        account = request.POST.get('account')
        pwd = request.POST.get('pwd')
        # 找到返回对象 没找到返回None
        user = auth.authenticate(username=account, password=pwd)
        if user:
            # request.session['user_id'] = user.pk
            auth.login(request, user)  # 登陆成功后如果是第一次访问session表里的session就新增了
            return redirect(reverse('students:index'))
        else:
            return HttpResponse('登陆失败')
def logout(request):
    # request.session.flush()
    auth.logout(request)
    return redirect(reverse('students:login'))

def index(request):
    '''
    批量导入数据:
    Booklist=[]
    for i in range(100):
        Booklist.append(Book(title="book"+str(i),price=30+i*i))
    Book.objects.bulk_create(Booklist)
    分页器的使用:
    book_list=Book.objects.all()
    paginator = Paginator(book_list, 10)
    print("count:",paginator.count)           #数据总数
    print("num_pages",paginator.num_pages)    #总页数
    print("page_range",paginator.page_range)  #页码的列表
    page1=paginator.page(1) # 第1页的page对象
    for i in page1:         # 遍历第1页的所有数据对象
        print(i)
    print(page1.object_list) #第1页的所有数据
    page2=paginator.page(2)
    print(page2.has_next())            #是否有下一页
    print(page2.next_page_number())    #下一页的页码
    print(page2.has_previous())        #是否有上一页
    print(page2.previous_page_number()) #上一页的页码
    # 抛错
    #page=paginator.page(12)   # error:EmptyPage
    #page=paginator.page("z")   # error:PageNotAnInteger
    '''
    book_list = Book.objects.all()
    paginator = Paginator(book_list, 10)
    page = request.GET.get('page', 1)
    current_page = int(page)
    try:
        print(page)
        book_list = paginator.page(page)
    except PageNotAnInteger:
        book_list = paginator.page(1)
    except EmptyPage:
        book_list = paginator.page(paginator.num_pages)
    return render(request, "index.html", {"book_list": book_list, "paginator": paginator, "currentPage": current_page})

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Title</title>
    <link rel="stylesheet" href="https://cdn.bootcss.com/bootstrap/3.3.7/css/bootstrap.min.css" 
    integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
</head>
<body>
​
<div class="container">
​
    <h4>分页器</h4>
    <ul>
​
        {% for book in book_list %}
             <li>{{ book.title }} -----{{ book.price }}</li>
        {% endfor %}
​
     </ul>
​
​
    <ul class="pagination" id="pager">
​
                 {% if book_list.has_previous %}
                    <li class="previous"><a href="/index/?page={{ book_list.previous_page_number }}">上一页</a></li>
                 {% else %}
                    <li class="previous disabled"><a href="#">上一页</a></li>
                 {% endif %}
​
​
                 {% for num in paginator.page_range %}
​
                     {% if num == currentPage %}
                       <li class="item active"><a href="/index/?page={{ num }}">{{ num }}</a></li>
                     {% else %}
                       <li class="item"><a href="/index/?page={{ num }}">{{ num }}</a></li>
​
                     {% endif %}
                 {% endfor %}
​
​
​
                 {% if book_list.has_next %}
                    <li class="next"><a href="/index/?page={{ book_list.next_page_number }}">下一页</a></li>
                 {% else %}
                    <li class="next disabled"><a href="#">下一页</a></li>
                 {% endif %}
​
            </ul>
</div>
​
​
​
</body>
</html>

# FBV
# def index(request):
#     if request.method == "GET":
#
#         return HttpResponse("GET")
#     elif request.method == "POST":
#
#         return HttpResponse("POST")
#
#     elif request.method == "DELETE":
#         return HttpResponse("DELETE")
​
# CBV模式: 基于restful开发
​
class IndexView(View):
​
    def get(self, request):
        return HttpResponse("CBV GET")
​
    def post(self, request):
        return HttpResponse("CBV POST")
​
​
class BookView(View):
​
    def get(self, request):
        # 获取数据
        book_list = Book.objects.all()
​
        # 序列化：json
        data_json = serializers.serialize("json", book_list)
​
        return HttpResponse(data_json, content_type="json")
​
# FBV模式
# path('index/', views.index),
# CBV模式
path("index/",views.IndexView.as_view()),
path("books/",views.BookView.as_view())

$.ajax({
  url: '/csrf_test/',
  method: 'post',
  data: {'name': $('[name="name"]').val(),
         'password': $('[name="password"]').val(),
         'csrfmiddlewaretoken':$('[name="csrfmiddlewaretoken"]').val()           
        },
  success: function (data) {
    console.log('成功了')
    console.log(data)           },
})

$.ajax({
            url: '/csrf_test/',
            method: 'post',
            headers:{'X-CSRFToken':'token值'},  // 注意放到引号里面
            data:{}
}

from django.views.decorators.csrf import csrf_exempt,csrf_protect
@csrf_exempt
def 函数名(request):  # 加上装饰器后,这个视图函数,就没有csrf校验了

from django.views.decorators.csrf import csrf_exempt,csrf_protect
from django.utils.decorators import method_decorator
@method_decorator(csrf_exempt,name='dispatch')
class index(View):
    def get(self,request):
        return HttpResponse("GET")
    def post(self,request):
        return HttpResponse("POST")

def login(request):
    if request.method == 'GET':
        print('oooooooopppppppppppp')
        return render(request, 'students/login.html')
    else:
        account = request.POST.get('account')
        pwd = request.POST.get('password')
        user = auth.authenticate(username=account, password=pwd)
        dct = {'state': False, 'msg': '登陆失败'}
        if user:
            auth.login(request, user)
            dct['state'] = True
            dct['msg'] = ''
        return JsonResponse(dct)
def get_tokens(request):
    tok = get_token(request)
    return HttpResponse(tok)

<h3>form表单上传文件</h3>
​
<form action="/upload_file/" method="post" enctype="multipart/form-data">
    <p><input type="file" name="upload_file_form"></p>
    <input type="submit">
</form>

<h3>Ajax上传文件</h3>
​
<p><input type="text" name="username" id="username" placeholder="username"></p>
<p><input type="file" name="upload_file_ajax" id="upload_file_ajax"></p>
​
<button id="upload_button">提交</button>
{#注意button标签不要用在form表单中使用#}
​
<script>
    $("#upload_button").click(function(){
​
        var username=$("#username").val();
        var upload_file=$("#upload_file_ajax")[0].files[0];
​
        var formData=new FormData();
        formData.append("username",username);
        formData.append("upload_file_ajax",upload_file);
​
​
        $.ajax({
            url:"/upload_file/",
            type:"POST",
            data:formData,
            contentType:false,
            processData:false,
​
            success:function(){
                alert("上传成功!")
            }
        });
    })
</script>

class Userinfo(models.Model):
    name = models.CharField(max_length=32)
    avatar_img = models.FileField("avatars/") 

from django.views.static import serve
# 添加media 配置
re_path(r'^media/(?P<path>.*)$', serve, {'document_root': settings.MEDIA_ROOT}),

def user_directory_path(instance, filename):
    return os.path.join(instance.name,"avatars", filename)
class Userinfo(models.Model):
    name = models.CharField(max_length=32)
    avatar_img = models.FileField(upload_to=user_directory_path)  .