Django：'TypeError：'HttpResponseForbidden'对象不可调用

Question

正在建立一个工作门户。我遇到了标题上的错误。我已经尝试了所有建议的解决方案。没有人能解决我的问题。请协助。过去 48 小时内，该错误一直把我当作人质。如果尝试登录、管理、注册或访问任何页面，我会得到

'TypeError: 'HttpResponseForbidden' 对象不可调用

这是模型、视图和模板：

model_1

#models
from django.db import models
from django.contrib.auth.models import User
from django.db.models.deletion import CASCADE
from PIL import Image


class Profile(models.Model):
    user = models.OneToOneField(User,on_delete=models.CASCADE)
    image = models.ImageField(default='default.jpg', upload_to='profile_pic')

    def __str__(self):
        return f'{self.user.username} Profile'

    def save(self):
        super().save()     
        img = Image.open(self.image.path)
        if img.height > 300 and img.width > 300:
            output_size=(300,300)
            img.thumbnail(output_size)
            img.save(self.image.path)

Views_1

from django.shortcuts import render, get_object_or_404, redirect
from django.contrib.auth import authenticate
from django.http import request, HttpResponse
from django.contrib import messages
from .forms import *
from .models import *
from django.contrib.auth.models import User
from django.contrib.auth.decorators import login_required

# Create your views here.
def register(request):
    if request.method == 'POST':
        form = CompRegisterForm(request.POST)
        if form.is_valid():
            form.save()
            username = form.cleaned_data.get('username')
            return redirect('Login')
    else:
        form = CompRegisterForm()
    return render(request, 'Users/register.html', {'form': form})


@login_required
def profile(request):
    if request.method == 'POST':
        u_form = CompUpdateForm(request.POST, instance=request.user)
        p_form = ProfilePicForm(request.POST,
                                request.FILES,
                                instance=request.user.profile)
        if u_form.is_valid() and p_form.is_valid():
            u_form.save()
            p_form.save()
            messages.success(request, f'Your account has been updated!')
            return redirect('Profile_Page')

    else:
        u_form = CompUpdateForm(instance=request.user)
        p_form = ProfilePicForm(instance=request.user.profile)

    context = {
        'u_form': u_form,
        'p_form': p_form
    }

    return render(request, 'Users/profile.html', context)

模板

{% extends "../Job/base.html"%}
{% load crispy_forms_tags %}
{% block content%}
{% load bootstrap %}
<div class="container">
  <form method ="POST", enctype="multipart/form-data">
    {%csrf_token%}
    <fieldset>
      <legend class="border-bottom mb-4">Login</legend> 
      {{form|bootstrap}}
    </fieldset>
    <div class="form-group">
      <button class="btn btn-outline-info" type="Submit">Login </button>
    </div>
  </form>
  <div class="border-top pt-3"> 
    <small class= "text-muted">
    Need an account ? <a class= 'ml-2' href="{% url 'Register' %}"> Sign up </a>
    </small>
    <small>
      Forgot Password ? <a class = 'ml-2' href="{% url 'password_reset'%}">Reset Password</a>
    </small>
  
  </div>
</div>
{% endblock content %}

网址

from typing import Pattern
from django.contrib import admin
from django.urls import path, include
from django.contrib.auth import views as auth_views
from django.conf import settings
from django.conf.urls.static import static
from Users import views as user_views


urlpatterns = [
    path('admin/', admin.site.urls),
    path('', include('Job.urls')),
    path('register/', user_views.register, name="Register"),
    path('login/', auth_views.LoginView.as_view(template_name='Users/login.html'), name='Login'),
    path('Logout/', auth_views.LogoutView.as_view(template_name='Users/index.html'), name='Logout'),
    path('profile/', user_views.Profile, name="Profile_Page"),
    path('Password-reset/', auth_views.PasswordResetView.as_view(
        template_name='Users/password_reset.html'), name='password_reset'),
    path('Password-reset/done/', auth_views.PasswordResetDoneView.as_view(
        template_name='Users/password_reset_done.html'), name='password_reset_done'),
    path('Password-reset-confirm/<uidb64>/<token>/', auth_views.PasswordResetConfirmView.as_view(
        template_name='Users/password_reset_confirm.html'), name='password_reset_confirm'),
]


if settings.DEBUG:
    urlpatterns += static(settings.MEDIA_URL,
                          document_root=settings.MEDIA_ROOT)

错误

Traceback (most recent call last):
  File "/home/tito/wira_Proj/wira_env/lib/python3.8/site-packages/django/core/handlers/exception.py", line 47, in inner
    response = get_response(request)
TypeError: 'HttpResponseForbidden' object is not callable
[31/Aug/2021 06:59:12] "GET /profile/ HTTP/1.1" 500 58968
Internal Server Error: /favicon.ico
Traceback (most recent call last):
  File "/home/tito/wira_Proj/wira_env/lib/python3.8/site-packages/django/core/handlers/exception.py", line 47, in inner
    response = get_response(request)
TypeError: 'HttpResponseForbidden' object is not callable

我们将非常感谢您的帮助

Answer 1

最后，我得到了解决方案： 检查您的 settings.py 文件中的以下内容并删除/删除它们

• CSRF_COOKIE_DOMAIN：设置 CSRF cookie 时要使用的域。这对于轻松允许跨子域请求从正常的跨站点请求伪造保护中排除非常有用。它应该设置为诸如“.example.com”之类的字符串，以允许来自一个子域上的表单的 POST 请求被另一个子域提供的视图接受。
• CSRF_COOKIE_SECURE：如果您设置为 true，则 cookie 将被标记为“安全”，这意味着浏览器可以确保 cookie 仅通过 HTTPS 连接发送。记住您正在使用 localhost
• django.views.csrf.csrf_failure

阅读更多来自django Crosssite Forgery

Answer 2

在你看来试试这个

def profile(request):
    if request.method == 'POST':
        u_form = CompUpdateForm(request.POST, instance=request.user)
        p_form = ProfilePicForm(request.POST,
                                request.FILES,
                                instance=request.user.profile)
        if u_form.is_valid() and p_form.is_valid():
            u_form.save()
            p_form.save()
            messages.success(request, f'Your account has been updated!')
            return redirect('Profile_Page')

    else:
        u_form = CompUpdateForm()
        p_form = ProfilePicForm()

    context = {
        'u_form': u_form,
        'p_form': p_form
    }

    return render(request, 'Users/profile.html', context)