def upload_book():
if current_user.student_id != '1602140129':
flash("非法操作!")
return redirect(url_for('web.recent'))
form = UploadForm(request.form)
if request.method == 'POST' and form.validate():
upload_result = filter_images(form.number.data)
if upload_result:
with db.auto_commit():
book = Book()
book.set_attrs(form.data)
book.image = upload_result
db.session.add(book)
flash('上传成功！')
return render_template('upload.html', form=form)
else:
flash('失败!')
return render_template('upload.html', form=form)
