MultiValueDictKeyError at/boardeditor/

Question

我有一個生成2個表單的模板。這些表單用於通過POST檢索數據

問題是當用戶通過POST篡改數據時，例如刪除名爲process的輸入屬性名稱。

----------------------------- 4827543632391 \ r \ n Content-Disposition：form-data; NAME = 「csrfmiddlewaretoken爲」 \ r \ n \ r \ nYWSIqoP9MjdKYlauwT5fSdxtFH2rcoaH \ r \ n ----------------------------- 4827543632391 \ r \ nContent-Disposition：表單數據; NAME = 「板」 \ r \ n \ r \ n \ r \ n ----------------------------- 4827543632391 \ r \ nContent-Disposition：表單數據;名稱= 「過程爲」 \ r \ n \ r \ n刪除\ r \ n ----------------------------- 4827543632391 - \ r \ n

我得到這個錯誤如果用戶從名稱中刪除值過程。

如何解決此錯誤並防止用戶篡改表單。

MultiValueDictKeyError at /whiteboardeditor/ 

Key 'process' not found in <QueryDict: {u'': [u'delete'], u'csrfmiddlewaretoken':  [u'YWSIqoP9MjdKYlauwT5fSdxtFH2rcoaH'], u'board': [u'2']}> 
File "C:\o\17\mysite\pet\views.py" in WhiteBoardEditor 
    362.    if request.POST['process'] == 'primary': 
File "C:\Python26\lib\site-packages\django\utils\datastructures.py" in __getitem__ 
    258.    raise MultiValueDictKeyError("Key %r not found in %r" % (key, self)) 

Exception Type: MultiValueDictKeyError at /whiteboardeditor/ 
Exception Value: Key 'process' not found in <QueryDict: {u'': [u'delete'],  u'csrfmiddlewaretoken': [u'YWSIqoP9MjdKYlauwT5fSdxtFH2rcoaH'], u'board': [u'2']}> 

我的HTML

<form method="POST" enctype="multipart/form-data"> 
    {% csrf_token %} 
    {{ boardpicture.as_p }} 
<input type = "hidden" name="process" value= "primary" /> 
<input type = "submit" value= "save" /> 
</form> 

     {% for p in picture %} 
<li><a href ="{% url world:delpic p.id 1 %}">{{p.description}}</a> 
{% endfor %} 




<form method="POST" enctype="multipart/form-data"> 
    {% csrf_token %} 
    {{ picturedelete.as_p }} 
    <input type = "hidden" name="process" value= "delete" /> 
    <input type = "submit" value= "save" /> 

</form> 

</form> 
{% for pi in pict %} 
<li><a href ="{% url world:delpic pi.id 2 %}">{{ pi.description }}</a> 
{% endfor %} 

我views.py

def WhiteBoardEditor(request): 
    if not request.user.is_authenticated(): 
    return HttpResponseRedirect(reverse('world:LoginRequest')) 
picture = {} 
pict = {} 

if request.method == "POST": 
     forms = WhiteBoardPictureForm(request.user,request.POST,) 
     formss = PictureDeleteForm(request.user,request.POST,) 
     if request.POST['process'] == 'primary': 
      if forms.is_valid(): 
       board = forms.cleaned_data['board'] 
      if board: 
       boards = forms.cleaned_data['board'] 
       picture = Picture.objects.filter(board=boards) 
      return render(request,'boardeditor.html',{ 
       'picture':picture, 
       'boardpicture':WhiteBoardPictureForm(request.user), 
       'picturedelete':PictureDeleteForm(request.user)}) 

     elif request.POST['process'] == 'delete': 
      if formss.is_valid(): 
       pooh = formss.cleaned_data['board'] 
       if pooh: 
        pooh = formss.cleaned_data['board'] 
        pict = Picture.objects.filter(board=pooh) 
      return render(request,'boardeditor.html',{ 
      'pict':pict, 
      'boardpicture':WhiteBoardPictureForm(request.user), 
      'picturedelete':PictureDeleteForm(request.user)}) 

      return render(request,'boardeditor.html',{'board':WhiteBoardNameForm(request.user),'boardpicture':WhiteBoardPictureForm(request.user),'picturedelete':PictureDeleteForm(request.user)}) 

我views.py

class WhiteBoardPictureForm(forms.ModelForm): 

     def __init__(self, user, *args, **kwargs): 
       super(WhiteBoardPictureForm, self).__init__(*args, **kwargs) 
       self.fields['board'].queryset = Board.objects.filter(user=user) 

    class Meta: 
     model = Picture 
     fields = ('board',) 

class PictureDeleteForm(forms.ModelForm): 

     def __init__(self, user, *args, **kwargs): 
       super(PictureDeleteForm, self).__init__(*args, **kwargs) 
       self.fields['board'].queryset = Board.objects.filter(user=user) 

    class Meta: 
     model = Picture 
     fields = ('board',) 

Answer 1

您應該驗證處理前的形式，像form.is_valid()和回報適當 如果頁面無效，則表單和錯誤頁面。

如果表單有效，則使用發佈數據的form.cleaned_data而不是request.POST。

這裏是如何使用的形式Using forms in view

因此，無論您可以在表單中添加process輸入字段。

或者此特定情況下，您可以在您的視圖之前處理形式

if request.POST.has_key('process'): 
    # return error