def upload(): if 'username' in session: form = UploadForm() if request.method == 'POST': if form.validate_on_submit(): # create new record new_post = Post() new_post.poster = User.objects.get( username=session['username']).id new_post.title = form.title.data new_post.tags = [x for x in form.tags.data] if form.link.data: new_post.link = form.link.data if request.files.get('meme'): filename = secure_filename(form.meme.data.filename) hashed_fname = sha256(filename.encode('utf-8')).hexdigest() file_path = os.path.join('upload_folder', hashed_fname) form.meme.data.save(file_path) new_post.image = hashed_fname new_post.save() return redirect(url_for('general_app.index')) return render_template('post/upload.html', form=form) else: return abort(403)