post_management.py 文件源码

def valid_session():
    if 'logged_in' not in session or 'username' not in session or 'session_id' not in session or 'email' not in session:
        # session['messages'] =  "No active session"
        return False

    g.cur.execute("select session_id from login_data where email='%s'"%(session['email']))
    result=g.cur.fetchall()
    result=result[0][0]
    if session['session_id']==result:
        return True

    else:
        #pop all session entries
        session.pop('logged_in', None)
        session.pop('session_id', None)
        session.pop('username', None)
        session.pop('email', None)
        return False
        # return redirect(url_for('login'))