删除功能

app.py

@@ -133,6 +133,20 @@ def like(id):
 
     return str(c.likeNum)
 
+@app.route('/ordinary/<int:id>/delete', methods=['POST'])
+def delete(id):
+    key = request.form.get('key')
+    if key != C.key:
+        abort(401)
+ 
+    c = Candidate.query.get(id)
+    if not c:
+        abort(404)
+
+    db.session.delete(c)
+    db.session.commit()
+
+    return redirect('..')
 
 if __name__ == '__main__':
     app.run(debug=True)

templates/list.html

@@ -240,6 +240,14 @@
       </div>
       {% for c in pagination.items %}
       <div class="qbox">
+        {% if showPrivate %}
+        <form action="{{c.id}}/delete" method="post">
+          <input type="hidden" name="key" value="{{key}}">
+          <button type="submit" class="close" aria-label="Close">
+            <span>×</span>
+          </button>
+        </form>
+        {% endif %}
         <small>No. {{c.id}}</small>
         <pre class="inner">{{c.content}}</pre>
         {% if showPrivate %}