为什么我的代码跳过我的索引页？

Question

每当我进入登录站点（0.0.0.0:5000/）时，页面立即恢复为0.0.0.0:5000/admin。任何想法为什么发生这种情况？

在intel爱迪生上运行yocto。通过腻子编辑

@app.errorhandler(404) 
@app.errorhandler(500) 
def errorpage(e): 
    return render_template('404.html') 

def login_required(f): 
    @wraps(f) 
    def wrap(*args, **kwargs): 
     if 'logged_in' in session: 
      return f(*args, **kwargs) 
     else: 
      flash('please login first.') 
      return redirect (url_for('index')) 
    return wrap 

@app.route('/', methods=['GET','POST']) 
def index(): 
    error = None 
    if request.method == 'POST': 
     if request.form['username'] != 'admin' or request.form['password'] != 'password': 
      error = 'invalid attempt.' 

    else: 
     session['logged_in'] = True 
     return redirect(url_for('admin')) 
    return render_template('index.html', error = error) 

@app.route('/logout') 
def logout(): 
    session.pop('logged_in', None) 
    return render_template('/logout.html') 

@app.route('/admin',methods=['GET','POST']) 
@login_required 
def admin(): 

Answer 1

看起来只要有人点击了GET的页面，将它设置为logged_in = True和重定向到/admin

@app.route('/', methods=['GET','POST']) 
def index(): 
    error = None 
    if request.method == 'POST': 
     if request.form['username'] != 'admin' or request.form['password'] != 'password': 
      error = 'invalid attempt.' 

    else: # this is always triggered for GETs, even if not logged in! 
     session['logged_in'] = True 
     return redirect(url_for('admin')) 
    return render_template('index.html', error = error) 

相反，你应该检查他们已经登录后，并在检查完凭据后改为在POST块中设置logged_in属性。

其实，它只是看起来像你的缩进是把你的else块：

@app.route('/', methods=['GET','POST']) 
def index(): 
    error = None 
    if request.method == 'POST': 
     if request.form['username'] != 'admin' or request.form['password'] != 'password': 
      error = 'invalid' 
     else: # this indenting should work now 
      session['logged_in'] = True 
      return redirect(url_for('admin')) 

    return render_template('index.html', error = error)