def delete_post(post_id): post = Post.find_one(post_id) if post.author != current_user: abort(403) post.delete() flash('Your post has been deleted!', 'success') return redirect(url_for('main.home'))
def update_post(post_id): post = Post.find_one(post_id) if post.author != current_user: abort(403) form = PostForm() if form.validate_on_submit(): post.title = form.title.data post.content = form.content.data post.save() flash('Your post has been updated!', 'success') return redirect(url_for('posts.post', post_id=post_id)) elif request.method == 'GET': form.title.data = post.title form.content.data = post.content return render_template('create_post.html', title='Update Post', form=form, legend='Update Post')
def post(post_id): post = Post.find_one(post_id) return render_template('post.html', title=post.title, post=post)