Django ModelForm添加HiddenInput类型username字段后无法提交求助

你的问题出在两个核心点：一是表单隐藏字段硬编码了无效值，二是POST请求时错误使用initial传递参数，导致表单验证失败或存入错误数据。以下是具体修复方案：

方案一：后端直接赋值（推荐，更安全） #

完全不在表单中暴露username字段，避免前端篡改风险，直接在后端保存时从URL参数赋值。

修改forms.py #

from django import forms
from django.forms import Textarea
from .models import Post

class PostForm(forms.ModelForm):
    class Meta:
        model = Post
        fields = ['content']  # 移除username字段
        widgets = {
            'content': Textarea(attrs={
                'class': 'write_input',
                'placeholder': 'write your story here...'
            }),
        }
        labels = {
            'content': ''
        }

修改views.py #

from django.shortcuts import render, redirect
from .forms import PostForm
from .models import Post

def account_main(request, username):
    context = dict()
    if request.method == 'POST':
        form = PostForm(request.POST)
        if form.is_valid():
            # 先创建对象但不保存到数据库
            post = form.save(commit=False)
            # 直接从URL参数赋值username
            post.username = username
            post.save()
            return redirect('account_main', username=username)
    # GET请求初始化表单
    form = PostForm()
    posts = Post.objects.all().order_by('dt_created')

    context['username'] = username
    context['form'] = form
    context['posts'] = posts
    return render(request, 'Account/account_main.html', context=context)

方案二：保留隐藏字段传递（适合必须前端携带的场景） #

如果一定要用隐藏字段传递username，需要移除硬编码的无效值，并在GET请求时初始化表单值。

修改forms.py #

from django import forms
from django.forms import Textarea, HiddenInput
from .models import Post

class PostForm(forms.ModelForm):
    class Meta:
        model = Post
        fields = ['content', 'username']
        widgets = {
            'content': Textarea(attrs={
                'class': 'write_input',
                'placeholder': 'write your story here...'
            }),
            'username': HiddenInput()  # 移除硬编码的value=' '
        }
        labels = {
            'content': ''
        }

修改views.py #

from django.shortcuts import render, redirect
from .forms import PostForm
from .models import Post

def account_main(request, username):
    context = dict()
    if request.method == 'POST':
        form = PostForm(request.POST)
        if form.is_valid():
            form.save()
            return redirect('account_main', username=username)
    # GET请求时用initial初始化隐藏字段的username值
    form = PostForm(initial={'username': username})
    posts = Post.objects.all().order_by('dt_created')

    context['username'] = username
    context['form'] = form
    context['posts'] = posts
    return render(request, 'Account/account_main.html', context=context)

关键说明 #

1. 方案一中，commit=False用于先创建Post对象但不立即写入数据库，方便我们补充username字段后再保存，彻底避免前端篡改的可能。
2. 方案二中，initial仅对未绑定的表单（GET请求时）生效，POST请求时表单会优先读取提交的数据，因此不能在POST时用initial传递参数；同时移除硬编码的value=' '，避免提交无效的空格值。

内容的提问来源于stack exchange，提问作者gtj520