def new_item(): """Creates new item.""" form = ItemForm(request.form) categories = db.query(Category).order_by(Category.name).all() form.category_id.choices = [(c.id, c.name) for c in categories] if request.method != 'POST' or not form.validate(): return render_template('api/new_item.html', form=form) form_file = request.files[form.image.name] img_filename = None if form_file: filename = secure_filename(form_file.filename) filename = generate_unique_filename(filename) form_file.save(os.path.join(app.config['UPLOAD_FOLDER'], filename)) img_filename = filename new_item = Item(name=form.name.data, description=form.description.data, category_id=form.category_id.data, image=img_filename, user_id=session['user_id']) db.add(new_item) db.commit() flash(message="Item successfully created", category="success") return redirect(url_for('api.view_item', item_id=new_item.id))
def new_item(): """Create new item.""" # populate form form = ItemForm(request.form) categories = db.query(Category).order_by(Category.name).all() # sort alphabetically form.category_id.choices = [(c.id, c.name) for c in categories] # display and validate form if request.method != 'POST' or not form.validate(): return render_template('api/new_item.html', form = form) # get image file form_file = request.files[form.image.name] img_filename = None if form_file: filename = secure_filename(form_file.filename) filename = generate_unique_filename(filename) form_file.save(os.path.join(app.config['UPLOAD_FOLDER'], filename)) img_filename = filename # create item new_item = Item( name = form.name.data, description = form.description.data, category_id = form.category_id.data, image = img_filename, user_id = session['user_id']) db.add(new_item) db.commit() flash(message = "Item successfully created", category = "success") return redirect(url_for('api.view_item', item_id = new_item.id))
def edit_item(item_id): """Edit an item.""" try: item = db.query(Item).filter_by(id = item_id).one() except NoResultFound: abort(404) # only author can edit item if item.user_id != session['user_id']: flash(message = "You are not allowed to update this item", category = "error") return render_template("api/item.html", item = item) # populate form form = ItemForm(request.form, item) categories = db.query(Category).order_by(Category.name).all() # sort alphabetically form.category_id.choices = [(c.id, c.name) for c in categories] # display and validate form if request.method != 'POST' or not form.validate(): return render_template('api/edit_item.html', form = form, item = item) # get image file form_file = request.files[form.image.name] img_filename = None if form_file: filename = secure_filename(form_file.filename) filename = generate_unique_filename(filename) form_file.save(os.path.join(app.config['UPLOAD_FOLDER'], filename)) img_filename = filename # edit item item.name = form.name.data item.description = form.description.data item.category_id = form.category_id.data # only replace image if new image is uploaded if img_filename: item.image = img_filename db.add(item) db.commit() flash(message = "Item successfully updated", category = "success") return redirect(url_for('api.view_item', item_id = item.id))
def edit_item(item_id): """Edit an item.""" try: item = db.query(Item).filter_by(id=item_id).one() except NoResultFound: abort(404) if item.user_id != session['user_id']: flash(message="You access to update this item id denied", category="error") return render_template("api/item.html", item=item) form = ItemForm(request.form, item) categories = db.query(Category).order_by(Category.name).all() form.category_id.choices = [(c.id, c.name) for c in categories] if request.method != 'POST' or not form.validate(): return render_template('api/edit_item.html', form=form, item=item) form_file = request.files[form.image.name] img_filename = None if form_file: filename = secure_filename(form_file.filename) filename = generate_unique_filename(filename) form_file.save(os.path.join(app.config['UPLOAD_FOLDER'], filename)) img_filename = filename item.name = form.name.data item.description = form.description.data item.category_id = form.category_id.data if img_filename: item.image = img_filename db.add(item) db.commit() flash(message="Item updation is successfull", category="success") return redirect(url_for('api.view_item', item_id=item.id))