css中静态资源引用路径错误。

hunter/static/style.css

@@ -162,7 +162,7 @@ nav>div{
     left:10%;
 }
 #bg_img{
-    background: url("/static/hunter/images/welcome.jpeg") no-repeat;
+    background: url("/static/images/welcome.jpeg") no-repeat;
     background-size:100% 100%;
     margin:0 auto;
     height:100%;
@@ -225,7 +225,7 @@ nav>div{
     width:50px;
     height:50px;
     margin:5px;
-    background: url("/static/hunter/images/edit.png") no-repeat;
+    background: url("/static/images/edit.png") no-repeat;
     background-size:100% 100%;
 }
 .bar_bottom:hover{
@@ -832,13 +832,13 @@ li svg{
     width: 20px;
     height: 20px;
     margin: 5px 0;
-    background-image: url("/static/hunter/images/delete.png");
+    background-image: url("/static/images/delete.png");
 }
 .edit_img{
     width: 20px;
     height: 20px;
     margin: 5px 0;
-    background-image: url("/static/hunter/images/edit.png");
+    background-image: url("/static/images/edit.png");
 }
 .add_one button svg{
     margin:8px 5px;
@@ -862,7 +862,7 @@ li svg{
     height: 20px;
     margin: 5px 0;
     float: left !important;
-    background: url("/static/hunter/images/link.png") no-repeat !important;
+    background: url("/static/images/link.png") no-repeat !important;
 }
 #isPublish{
     width: 65%;

hunter/templates/admin.html

@@ -534,6 +534,7 @@
                         "score":scoreNum,
                         "reason":reason,
                         "action":addOrSub,
+                        'csrfmiddlewaretoken': '{{ csrf_token }}'
                     },
                     dataType: 'json',
                     success: function (response) {

hunter/templates/user.html

@@ -192,9 +192,9 @@
         <strong><a href="//www.hunter-ht.cn/" target="_blank">hunter-ht.cn</a></strong> All Rights Reserved. 备案号：<a target="_blank" rel="nofollow" href="http://www.beian.miit.gov.cn">湘ICP备18008562号</a>
    </div>
 </footer>
-<script type="text/javascript" src="{% static 'hunter/bootstrap.min.js' %}"></script>
-    <script type="text/javascript" src="{% static 'hunter/bootstrap-datetimepicker.js' %}" charset="UTF-8"></script>
-    <script type="text/javascript" src="{% static 'hunter/bootstrap-datetimepicker.zh-CN.js' %}" charset="UTF-8"></script>
+<script type="text/javascript" src="{% static 'bootstrap.min.js' %}"></script>
+    <script type="text/javascript" src="{% static 'bootstrap-datetimepicker.js' %}" charset="UTF-8"></script>
+    <script type="text/javascript" src="{% static 'bootstrap-datetimepicker.zh-CN.js' %}" charset="UTF-8"></script>
     <script type="text/javascript">
     $('.form_datetime').datetimepicker({
         //language:  'fr',

hunter/views/view_api.py

@@ -85,7 +85,7 @@ def profile_submit(request):
         except ObjectDoesNotExist as e:
             return JsonResponse({"message":0,'error':e})
 
-            
+
 @csrf_exempt
 def save_edit_art(request):
     userID = request.POST.get('userID', '')
@@ -137,7 +137,7 @@ def save_edit_art(request):
             return response
 
 
-@csrf_exempt
+
 def add_url_article(request):
     userID = request.POST.get('userID', '')
     title = request.POST.get('title', '')

hunter/views/view_page.py

@@ -250,7 +250,6 @@ def article_html(request, article_id):
 
 
 # 新建文章页面
-@csrf_exempt
 def write_art_html(request):
     if request.is_ajax():
         userID = request.POST.get('userID', '')
@@ -341,7 +340,6 @@ def check_admin_privilage(user_id):
 # 管理员
 def admin(request):
     admin_id = request.session.get('admin_id')
-    admin_id = 4
     if admin_id == None:
         if request.method != 'POST':
             return HttpResponseNotFound('<h1>Page not found</h1>')
@@ -502,7 +500,6 @@ def add_user(request):
     return render(request, 'admin.html')
 
 
-@csrf_exempt
 def add_sub_score(request):
     if request.is_ajax():
         action = request.POST.get("action")