Django 安全动态删除功能实现教程

@login_required()
def delete(request, id):
     poost = get_object_or_404(post, pk=id) # 注意这里的 'post' 应该是模型类名，通常首字母大写
     if request.user == poost.author:
          poost.delete()
          messages.error(request, f'Post deleted!')
          return redirect("/")

from django.shortcuts import get_object_or_404, redirect
from django.contrib.auth.decorators import login_required
from django.contrib import messages
# 假设您的文章模型名为 Post
from .models import Post # 根据您的实际模型路径调整

@login_required
def delete(request, id):
    """
    删除指定ID的文章。
    只有文章作者本人才能删除自己的文章。
    """
    try:
        # 尝试获取指定ID且作者为当前用户的文章
        # 如果文章不存在或当前用户不是作者，则返回404错误
        article = get_object_or_404(Post, pk=id, author=request.user)
        article.delete()
        messages.success(request, f'文章 "{article.title}" 已成功删除！') # 使用 success 消息更合适
        return redirect("/")
    except Exception as e:
        messages.error(request, f'删除文章失败：{e}')
        return redirect("/")

{% if user.is_authenticated and user == post.author %}
    <a href="{% url 'update' post.id %}" class="btn btn-primary btn-small">Edit</a>
    <!-- 修改后的删除按钮，添加 data-post-id 和 data-post-title 属性 -->
    <a href="#" class="btn btn-danger btn-small delete-post-btn"
       data-toggle="modal"
       data-target="#deleteConfirmationModal"
       data-post-id="{{ post.id }}"
       data-post-title="{{ post.title }}">
       Delete <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-trash" viewBox="0 0 16 16">
         <path d="M5.5 5.5A.5.5 0 0 1 6 6v6a.5.5 0 0 1-1 0V6a.5.5 0 0 1 .5-.5Zm2.5 0a.5.5 0 0 1 .5.5v6a.5.5 0 0 1-1 0V6a.5.5 0 0 1 .5-.5Zm3 .5a.5.5 0 0 0-1 0v6a.5.5 0 0 0 1 0V6Z"/>
         <path d="M14.5 3a1 1 0 0 1-1 1H13v9a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V4h-.5a1 1 0 0 1-1-1V2a1 1 0 0 1 1-1H6a1 1 0 0 1 1-1h2a1 1 0 0 1 1 1h3.5a1 1 0 0 1 1 1v1ZM4.118 4 4 4.059V13a1 1 0 0 0 1 1h6a1 1 0 0 0 1-1V4.059L11.882 4H4.118ZM2.5 3h11V2h-11v1Z"/>
       </svg>
    </a>
{% endif %}

<!-- 删除确认 Modal，确保只定义一次 -->
<div class="modal fade" id="deleteConfirmationModal" tabindex="-1" role="dialog" aria-labelledby="deleteConfirmationModalLabel" aria-hidden="true">
  <div class="modal-dialog" role="document">
    <div class="modal-content">
      <div class="modal-header">
        <h5 class="modal-title" id="deleteConfirmationModalLabel">确认删除文章</h5>
        <button type="button" class="close" data-dismiss="modal" aria-label="Close">
          <span aria-hidden="true">&times;</span>
        </button>
      </div>
      <div class="modal-body">
        <p class="text-muted">您确定要删除文章 "<strong id="modalPostTitle"></strong>" 吗？此操作无法撤销。</p>
      </div>
      <div class="modal-footer">
        <button type="button" class="btn btn-secondary" data-dismiss="modal">取消</button>
        <!-- 删除按钮的 href 将通过 JavaScript 动态设置 -->
        <a id="confirmDeleteLink" href="#" class="btn btn-danger">删除</a>
      </div>
    </div>
  </div>
</div>

<script src="https://code.jquery.com/jquery-3.5.1.slim.min.js"></script>
<script src="https://cdn.jsdelivr.net/npm/bootstrap@4.5.2/dist/js/bootstrap.bundle.min.js"></script>
<script>
$(document).ready(function() {
    $('#deleteConfirmationModal').on('show.bs.modal', function (event) {
        var button = $(event.relatedTarget); // 获取触发 Modal 的按钮
        var postId = button.data('post-id'); // 从按钮的 data-post-id 属性中获取文章 ID
        var postTitle = button.data('post-title'); // 从按钮的 data-post-title 属性中获取文章标题

        var modal = $(this);
        // 更新 Modal 中的文章标题显示
        modal.find('#modalPostTitle').text(postTitle);
        // 更新 Modal 中删除链接的 href 属性
        // 假设您的删除 URL 模式是 /delete/<int:id>
        modal.find('#confirmDeleteLink').attr('href', '/delete/' + postId);
    });
});
</script>

from django.urls import path
from . import views
# from .views import PostUpdateView # 如果PostUpdateView不是类视图，可能不需要这样导入

urlpatterns = [
    # ... 其他URL模式
    path('delete/<int:id>', views.delete, name='delete'), # 确保这里的 'delete' 对应您的视图函数名
    # ... 其他URL模式
]