def delete_post(post_id):
post = Post.find_one(post_id)
if post.author != current_user:
abort(403)
post.delete()
flash('Your post has been deleted!', 'success')
return redirect(url_for('main.home'))
def update_post(post_id):
post = Post.find_one(post_id)
if post.author != current_user:
abort(403)
form = PostForm()
if form.validate_on_submit():
post.title = form.title.data
post.content = form.content.data
post.save()
flash('Your post has been updated!', 'success')
return redirect(url_for('posts.post', post_id=post_id))
elif request.method == 'GET':
form.title.data = post.title
form.content.data = post.content
return render_template('create_post.html', title='Update Post', form=form, legend='Update Post')
def post(post_id):
post = Post.find_one(post_id)
return render_template('post.html', title=post.title, post=post)
