| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556 |
- from __future__ import unicode_literals
- from django.db import models
- from django.utils.translation import ugettext_lazy as _
- class SessionManager(models.Manager):
- def encode(self, session_dict):
- """
- Returns the given session dictionary serialized and encoded as a string.
- """
- return SessionStore().encode(session_dict)
- def save(self, session_key, session_dict, expire_date):
- s = self.model(session_key, self.encode(session_dict), expire_date)
- if session_dict:
- s.save()
- else:
- s.delete() # Clear sessions with no data.
- return s
- class Session(models.Model):
- """
- Django provides full support for anonymous sessions. The session
- framework lets you store and retrieve arbitrary data on a
- per-site-visitor basis. It stores data on the server side and
- abstracts the sending and receiving of cookies. Cookies contain a
- session ID -- not the data itself.
- The Django sessions framework is entirely cookie-based. It does
- not fall back to putting session IDs in URLs. This is an intentional
- design decision. Not only does that behavior make URLs ugly, it makes
- your site vulnerable to session-ID theft via the "Referer" header.
- For complete documentation on using Sessions in your code, consult
- the sessions documentation that is shipped with Django (also available
- on the Django Web site).
- """
- session_key = models.CharField(_('session key'), max_length=40,
- primary_key=True)
- session_data = models.TextField(_('session data'))
- expire_date = models.DateTimeField(_('expire date'), db_index=True)
- objects = SessionManager()
- class Meta:
- db_table = 'django_session'
- verbose_name = _('session')
- verbose_name_plural = _('sessions')
- def get_decoded(self):
- return SessionStore().decode(self.session_data)
- # At bottom to avoid circular import
- from django.contrib.sessions.backends.db import SessionStore
|
