如何在ModelForm中定义隐藏字段、设置值并保存至数据库（含页面URL获取）

1. Defining a Hidden Field in ModelForm, Setting Its Value, and Saving to Database #

Let’s walk through this step by step—first, make sure your model has a place to store the hidden data, then configure the form to hide it, and finally set the value and save it in your view.

Step 1: Add a Field to Your Model #

First, update your model to include a field that will hold the hidden data. Pick a field type that matches what you’re storing (e.g., CharField for general text, URLField for URLs):

# models.py
from django.db import models

class YourModel(models.Model):
    # Your existing fields (example)
    name = models.CharField(max_length=100)
    email = models.EmailField()
    
    # Field for hidden data
    hidden_data = models.CharField(max_length=255)

Step 2: Configure the ModelForm #

In your forms.py, specify that the field should use a HiddenInput widget. Don’t forget to include the field in the fields list so it gets included in the form:

# forms.py
from django import forms
from django.forms.widgets import HiddenInput
from .models import YourModel

class YourModelForm(forms.ModelForm):
    class Meta:
        model = YourModel
        fields = ['name', 'email', 'hidden_data']  # Include the hidden field here
        widgets = {
            'hidden_data': HiddenInput(),  # Mark this field as hidden
        }

Step 3: Set the Value and Save in the View #

You have two ways to set the hidden field’s value—choose based on whether you need to prevent user tampering:

Option A: Set Value in the View (Secure, Tamper-Proof)

This is the safer approach because users can’t modify the value via browser dev tools. Use commit=False to get the unsaved form instance, set the value, then save:

# views.py
from django.shortcuts import render, redirect
from .forms import YourModelForm

def your_view(request):
    if request.method == 'POST':
        form = YourModelForm(request.POST)
        if form.is_valid():
            # Get the unsaved instance
            instance = form.save(commit=False)
            # Set your hidden value here
            instance.hidden_data = "Your secret or dynamic value"
            # Save to the database
            instance.save()
            return redirect('success_page')
    else:
        # Initialize the form (no need to set initial value here)
        form = YourModelForm()
    
    return render(request, 'your_template.html', {'form': form})

Option B: Set Initial Value in the Form (Visible in HTML)

If you don’t mind users potentially editing the value (not recommended for sensitive data), set it as an initial value when creating the form:

# views.py (GET request section)
form = YourModelForm(initial={'hidden_data': "Your desired hidden value"})

When you render the form in your template, this will generate a hidden input with the pre-filled value.

Template Rendering #

Just render the form normally—hidden fields will automatically be rendered as <input type="hidden"> elements:

<!-- your_template.html -->
<form method="post">
    {% csrf_token %}
    {{ form.as_p }} <!-- Renders all fields, including hidden ones -->
    <button type="submit">Submit</button>
</form>

2. Saving the Current Page URL via a Hidden Field #

To save the current page’s URL, you’ll use Django’s request object to grab the URL, then apply the same pattern as above.

Step 1: Update Model and Form #

Add a URLField (or CharField) to your model, and set it as a hidden field in the form:

# models.py
class YourModel(models.Model):
    # ... existing fields
    page_url = models.URLField(max_length=200)  # Stores full URLs

# forms.py
class YourModelForm(forms.ModelForm):
    class Meta:
        model = YourModel
        fields = ['name', 'email', 'page_url']
        widgets = {
            'page_url': HiddenInput(),
        }

Step 2: Grab the Current URL and Save #

Use request.build_absolute_uri() to get the full URL (including domain and path). Set this value in the view before saving:

# views.py
def your_view(request):
    if request.method == 'POST':
        form = YourModelForm(request.POST)
        if form.is_valid():
            instance = form.save(commit=False)
            # Get the full current URL (e.g., https://yourdomain.com/your-page/)
            instance.page_url = request.build_absolute_uri()
            # Or use request.path for just the path (e.g., /your-page/)
            instance.save()
            return redirect('success_page')
    else:
        # Optional: Set initial URL in the form (not secure if users can edit it)
        form = YourModelForm(initial={'page_url': request.build_absolute_uri()})
    
    return render(request, 'your_template.html', {'form': form})

Key Notes #

• request.build_absolute_uri() gives you the full, complete URL (domain + path). Use request.path if you only need the path part.
• Setting the value in the view (with commit=False) is more secure—users can’t modify it. If you set it as an initial value, users can edit the hidden input via dev tools before submitting.

内容的提问来源于stack exchange，提问作者user7515195