由于html cookie是存储在客户端的，且为明文，故不安全，另外一个支持html间数据传输的为session

修改blog/views.py

[[email protected] alu02]#cat blog/views.py

from django importformsfrom django.http importHttpResponsefrom django.shortcuts importrender_to_responsefrom models importUserfrom django.http.response importHttpResponseRedirectclassUserForm(forms.Form):

username=forms.CharField()

password= forms.CharField(widget =forms.PasswordInput)defregister(req):if req.method == ‘POST‘:

form=UserForm(req.POST)ifform.is_valid():

username= form.cleaned_data[‘username‘]

password= form.cleaned_data[‘password‘]

User.objects.create(username=username, password=password)return HttpResponseRedirect(‘login‘)else:

form=UserForm()return render_to_response(‘register.html‘, {‘form‘:form})deflogin(req):if req.method == ‘POST‘:

form=UserForm(req.POST)ifform.is_valid():

username= form.cleaned_data[‘username‘]

password= form.cleaned_data[‘password‘]

users= User.objects.filter(username=username, password=password)ifusers:

req.session[‘username‘] =usernamereturn HttpResponseRedirect(‘index‘)else:return HttpResponseRedirect(‘login‘)else:

form=UserForm()return render_to_response(‘login.html‘, {‘form‘:form})defindex(req):

username= req.session.get(‘username‘,‘anybody‘)return render_to_response(‘index.html‘, {‘username‘: username})deflogout(req):del req.session[‘username‘]return HttpResponse(‘you are logout‘#

测试页面

查看session id

查看数据库中的session key，可见和firefox中的session id一致

mysql> select * fromdjango_session;+----------------------------------+--------------------------------------------------------------------------------------+----------------------------+

| session_key | session_data | expire_date |

+----------------------------------+--------------------------------------------------------------------------------------+----------------------------+

| q17c9eiikrmpz2vl6im1ye6wxiawoy6k | ZjEwMDIyOWYxMWQyNDM3ODlhMmYxMTQwYjMwZDEzNmI5OWIzMjAxYTp7InVzZXJuYW1lIjoiYWx1MDIifQ== | 2016-03-22 11:51:57.352419 |

+----------------------------------+--------------------------------------------------------------------------------------+----------------------------+

1 row in set (0.00sec)

mysql>

logout会在数据库中改变session data，也就是更新为不可使用值，但是session id在firefox和数据库中均不会被删除

mysql> select * fromdjango_session;+----------------------------------+--------------------------------------------------------------+----------------------------+

| session_key | session_data | expire_date |

+----------------------------------+--------------------------------------------------------------+----------------------------+

| q17c9eiikrmpz2vl6im1ye6wxiawoy6k | ZTFhOGIxMTdjNzE2NTMzMzc2NGI2MmMxMmIzN2Y0MjI0MDE3NGY4Nzp7fQ== | 2016-03-22 11:54:34.994341 |

+----------------------------------+--------------------------------------------------------------+----------------------------+

1 row in set (0.01sec)

mysql>

原文：http://www.cnblogs.com/onmyway227/p/5253518.html