优化Django应用中的动态删除功能：确保精确删除与安全控制

from django.shortcuts import get_object_or_404, redirect
from django.contrib.auth.decorators import login_required
from django.contrib import messages
from .models import Post  # 确保导入您的Post模型

@login_required()
def delete(request, id):
    """
    删除指定ID的帖子，并验证当前用户是否为帖子作者。
    """
    try:
        # 尝试获取指定ID且作者为当前用户的帖子
        # 如果帖子不存在或当前用户不是作者，则返回404
        post_to_delete = get_object_or_404(Post, pk=id, author=request.user)
        post_to_delete.delete()
        messages.success(request, f'帖子 "{post_to_delete.title}" 已成功删除！')
    except Exception as e:
        messages.error(request, f'删除帖子时发生错误: {e}')
    return redirect("/")

{% comment %} 假设这段代码在一个循环中，每次迭代的帖子对象为 `post` {% endcomment %}
<div class="card mb-4 box-shadow">
    <div class="card-header">
        <h4 class="my-0 font-weight-normal">{{ post.title }}</h4>
    </div>
    <div class="card-body">
        <!-- ... 其他帖子内容 ... -->
        {% if user.is_authenticated and user == post.author %}
            <a href="#" class="btn btn-danger btn-small"
               data-toggle="modal"
               data-target="#deletePostModal" {# 统一使用一个模态框ID #}
               data-post-id="{{ post.id }}" {# 存储帖子ID #}
               data-post-title="{{ post.title }}"> {# 存储帖子标题 #}
                删除 <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-trash" viewBox="0 0 16 16">
                    <path d="M5.5 5.5A.5.5 0 0 1 6 6v6a.5.5 0 0 1-1 0V6a.5.5 0 0 1 .5-.5Zm2.5 0a.5.5 0 0 1 .5.5v6a.5.5 0 0 1-1 0V6a.5.5 0 0 1 .5-.5Zm3 .5a.5.5 0 0 0-1 0v6a.5.5 0 0 0 1 0V6Z"/>
                    <path d="M14.5 3a1 1 0 0 1-1 1H13v9a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V4h-.5a1 1 0 0 1-1-1V2a1 1 0 0 1 1-1H6a1 1 0 0 1 1-1h2a1 1 0 0 1 1 1h3.5a1 1 0 0 1 1 1v1ZM4.118 4 4 4.059V13a1 1 0 0 0 1 1h6a1 1 0 0 0 1-1V4.059L11.882 4H4.118ZM2.5 3h11V2h-11v1Z"/>
                </svg>
            </a>
        {% endif %}
    </div>
</div>

<!-- 删除确认模态框 -->
<div class="modal fade" id="deletePostModal" tabindex="-1" role="dialog" aria-labelledby="deletePostModalLabel" aria-hidden="true">
  <div class="modal-dialog" role="document">
    <div class="modal-content">
      <div class="modal-header">
        <h5 class="modal-title" id="deletePostModalLabel">确认删除？</h5>
        <button type="button" class="close" data-dismiss="modal" aria-label="Close">
          <span aria-hidden="true">&times;</span>
        </button>
      </div>
      <div class="modal-body">
        <p class="text-muted"> 您确定要删除帖子 "<strong id="modalPostTitle"></strong>" 吗？此操作不可撤销。</p>
      </div>
      <div class="modal-footer">
        <button type="button" class="btn btn-secondary" data-dismiss="modal">取消</button>
        {# 注意：这里的 href 属性将在JS中动态设置 #}
        <a id="confirmDeleteButton" href="#" class="btn btn-danger">删除</a>
      </div>
    </div>
  </div>
</div>

{% comment %} 将以下脚本放在您的模板文件底部，</body> 标签之前 {% endcomment %}
<script src="https://code.jquery.com/jquery-3.5.1.min.js"></script> {# 确保引入jQuery #}
<script src="https://cdn.jsdelivr.net/npm/bootstrap@4.5.2/dist/js/bootstrap.bundle.min.js"></script> {# 确保引入Bootstrap JS #}
<script>
    $(document).ready(function() {
        // 监听 ID 为 'deletePostModal' 的模态框的显示事件
        $('#deletePostModal').on('show.bs.modal', function (event) {
            var button = $(event.relatedTarget); // 获取触发模态框的按钮
            var postId = button.data('post-id'); // 从按钮的 data-post-id 属性中获取帖子ID
            var postTitle = button.data('post-title'); // 从按钮的 data-post-title 属性中获取帖子标题

            var modal = $(this); // 获取模态框本身
            // 更新模态框中显示帖子标题的元素
            modal.find('#modalPostTitle').text(postTitle);
            // 更新模态框中确认删除按钮的 href 属性
            // 假设您的删除URL模式是 '/delete/<int:id>'
            modal.find('#confirmDeleteButton').attr('href', '/delete/' + postId);
        });
    });
</script>

from django.urls import path
from . import views

urlpatterns = [
    # ... 其他URL模式 ...
    path('delete/<int:id>', views.delete, name='delete'),
    # ... 其他URL模式 ...
]