2010-05-29 58 views
5

我试图建立User - UserProfile关系,显示窗体并保存数据。Django,ModelForms,用户和用户配置文件 - 不哈希密码

提交时,数据被保存,密码字段不被散列。

Forms.py

class UserForm(forms.ModelForm): 
    username = forms.RegexField(label="Username", max_length=30, 
     regex=r'^[\[email protected]+-]+$', help_text = "My text", 
     error_messages = {'invalid': 
      "This value may contain only letters, numbers and @/./+/-/_ characters." 
     } 
    ) 
    password = forms.CharField(label="Password", 
           widget=forms.PasswordInput) 

    class Meta: 
     model = User 
     fields = ["first_name", "last_name", "username", "email", "password"] 

    def clean_username(self): 
     username = self.cleaned_data['username'] 
     if not re.search(r'^\w+$', username): 
      raise forms.ValidationError(
        'Username can contain only alphanumeric characters') 
     try: 
      User.objects.get(username=username) 
     except ObjectDoesNotExist: 
      return username 
     raise forms.ValidationError('Username is already taken') 

class UserProfileForm(forms.ModelForm): 
    class Meta: 
     model = UserProfile 
     fields = ['user_is'] 

回答

8

编辑:这个答案写

后要设置用户密码原来的问题是编辑,你不设置profile.user.password = new_password - 这是在这种情况下使用模型表达的是什么;它会直接将它设置为非哈希值。

您需要使用适当的API来设置密码。所以,在profile.save()地说:

profile.user.set_password(uform.cleaned_data['password'])

要杀死help_text,要么不使用快速form.as_foo渲染器,或覆盖领域有没有在你的ModelForm的初始化的help_text()方法(请参阅Django表单文档)a

8

好的,回答我自己的问题。这可能会派上用场。

添加以下到UserForm

def save(self, commit=True): 
    user = super(UserForm, self).save(commit=False) 
    user.set_password(self.cleaned_data["password"]) 
    if commit: 
     user.save() 
    return user 
相关问题