def new_post():
form = PostForm()
if form.validate_on_submit():
post = Post(title=form.title.data, content=form.content.data, author=current_user)
db.session.add(post)
db.session.commit()
flash("Your post has been created successfully", 'success')
return redirect(url_for('home'))
return render_template('create_post.html', title='New Post', form=form, legend='Create New Post')
def create_post():
form = PostForm()
if form.validate_on_submit():
post = Post(title=form.title.data,
description=form.description.data,
user_id=current_user.id)
db.session.add(post)
db.session.commit()
flash(f'Post has been created', 'success')
return redirect(url_for('index'))
return render_template('create_post.html',
title="Add Post",
form=form,
heading='Create Post')
def update_post(post_id):
post = Post.query.get_or_404(post_id)
if post.author != current_user:
abort(403)
form = PostForm()
if form.validate_on_submit():
post.title = form.title.data
post.content = form.content.data
db.session.commit()
flash('Your post has been updated successfully.', 'success')
return redirect(url_for('post', post_id=post.id))
elif request.method == 'GET':
form.title.data = post.title
form.content.data = post.content
return render_template('create_post.html', title='Update Post', form=form, legend='Update Post')
def update_post(post_id):
form = PostForm()
post = Post.query.get(post_id)
if current_user != post.author:
abort(403)
if form.validate_on_submit():
post.title = form.title.data
post.description = form.description.data
db.session.commit()
flash('Post updated', 'success')
return redirect(url_for('index'))
elif request.method == 'GET':
form.title.data = post.title
form.description.data = post.description
return render_template('create_post.html',
title=f'Update Post {post_id}',
form=form,
heading='Update Post')