diff --git a/cao_sunyata/templates/blog_edit.jinja2 b/cao_sunyata/templates/blog_edit.jinja2 index 4e5ab7b..d836f45 100644 --- a/cao_sunyata/templates/blog_edit.jinja2 +++ b/cao_sunyata/templates/blog_edit.jinja2 @@ -36,12 +36,12 @@

- Topic : {{ entry.topic_id }} + Topic : {{ entry.topic_id }}
{% if blog_id != '0' %} -  |  - Créé le : {{ entry.created.strftime("%d-%m-%Y - %H:%M") }} -  |  - Modifié le : {{ entry.edited.strftime("%d-%m-%Y - %H:%M") }} + Créé le : {{ entry.created.strftime("%d-%m-%Y - %H:%M") }} + +
+ Modifié le : {{ entry.edited.strftime("%d-%m-%Y - %H:%M") }} {% endif %}


diff --git a/cao_sunyata/views/blog.py b/cao_sunyata/views/blog.py index 6a881dc..60efb9b 100644 --- a/cao_sunyata/views/blog.py +++ b/cao_sunyata/views/blog.py @@ -103,6 +103,12 @@ def blog_edit(request): entry.editor = request.authenticated_userid return HTTPFound(location=request.route_url('blog', id=entry.id, slug=entry.slug)) + if 'form.update_created' in request.params and form.validate(): + del form.id # SECURITY: prevent overwriting of primary key + form.populate_obj(entry) + entry.created = datetime.datetime.now() + return HTTPFound(location=request.route_url('blog', id=entry.id, slug=entry.slug)) + if 'form.deleted' in request.params: BlogRecordService.delete(request, blog_id) request.session.flash("La page a été supprimée avec succès.", 'success')