第13章 · 智慧星学生管理系统

# ① 加 user 应用
INSTALLED_APPS = [
    'django.contrib.admin',
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.messages',
    'django.contrib.staticfiles',
    'user',                 # ← 新加
]

# ② 课堂演示：允许任何 host 访问
ALLOWED_HOSTS = ['*']

# ③ 中文 + 北京时间，看着舒服
LANGUAGE_CODE = 'zh-Hans'
TIME_ZONE = 'Asia/Shanghai'
USE_TZ = False             # 关闭时区，时间存什么显示什么

from django.db import models
from django.contrib.auth.models import User


# =========== 学生表 ===========
# 一个学生 ↔ 一个 auth_user 账号（一对一）
class Student(models.Model):
    # OneToOneField：建立一对一关系
    # 学生删除时，对应的 User 也一起删（CASCADE）
    user = models.OneToOneField(User, on_delete=models.CASCADE,
                                verbose_name='登录账号')
    sno = models.CharField('学号', max_length=20, unique=True)
    name = models.CharField('姓名', max_length=30)
    klass = models.CharField('班级', max_length=30)

    class Meta:
        verbose_name = '学生'
        verbose_name_plural = '学生'     # 后台不显示"Students"

    def __str__(self):
        return f"{self.sno} {self.name}"


# =========== 老师表 ===========
class Teacher(models.Model):
    user = models.OneToOneField(User, on_delete=models.CASCADE,
                                verbose_name='登录账号')
    name = models.CharField('姓名', max_length=30)
    subject = models.CharField('科目', max_length=30)

    class Meta:
        verbose_name = verbose_name_plural = '老师'

    def __str__(self):
        return self.name


# =========== 成绩表 ===========
# 一名学生有多次成绩 → 学生是"一"，成绩是"多" → ForeignKey 在成绩表
class Score(models.Model):
    student = models.ForeignKey(Student, on_delete=models.CASCADE,
                                verbose_name='学生')
    subject = models.CharField('科目', max_length=30)
    score = models.DecimalField('分数', max_digits=5, decimal_places=1)
    exam_date = models.DateField('考试日期')

    class Meta:
        verbose_name = verbose_name_plural = '成绩'

    def __str__(self):
        return f"{self.student.name} {self.subject} {self.score}"

from django.contrib import admin
from .models import Student, Teacher, Score


# =========== 学生后台 ===========
@admin.register(Student)
class StudentAdmin(admin.ModelAdmin):
    # list_display：列表页显示哪些列
    list_display = ('sno', 'name', 'klass', 'user')
    # list_filter：右侧筛选侧栏，按班级筛选
    list_filter = ('klass',)
    # search_fields：上方搜索框，按学号 / 姓名搜
    search_fields = ('sno', 'name')


# =========== 老师后台 ===========
@admin.register(Teacher)
class TeacherAdmin(admin.ModelAdmin):
    list_display = ('name', 'subject', 'user')
    list_filter = ('subject',)


# =========== 成绩后台 ===========
@admin.register(Score)
class ScoreAdmin(admin.ModelAdmin):
    list_display = ('student', 'subject', 'score', 'exam_date')
    list_filter = ('subject', 'exam_date')
    # date_hierarchy：上方按日期分级筛选（年/月/日下拉）
    date_hierarchy = 'exam_date'

from django.contrib import admin
from django.urls import path
from user import views

urlpatterns = [
    path('admin/', admin.site.urls),
    path('', views.index),                  # 首页 = 学生登录页
    path('login/', views.student_login),     # 学生登录
    path('scores/', views.my_scores),        # 我的成绩
    path('logout/', views.student_logout),   # 退出
]

from django.shortcuts import render, redirect
from django.contrib.auth import authenticate, login, logout
from .models import Student, Score


def index(request):
    return redirect('/login/')


def student_login(request):
    if request.method == 'POST':
        sno = request.POST.get('sno')
        password = request.POST.get('password')

        # 关键设计：学号当 username 用
        # authenticate 是 Django 自带的密码校验函数
        # 它内部会处理"哈希后比较"——比自己写的安全得多
        user = authenticate(request, username=sno, password=password)

        if user is not None:
            login(request, user)            # Django 帮你写 session
            return redirect('/scores/')
        else:
            return render(request, 'login.html',
                          {'error': '学号或密码错误'})

    return render(request, 'login.html')


def my_scores(request):
    # request.user 是当前登录的 User 对象
    # 没登录时 request.user.is_authenticated 是 False
    if not request.user.is_authenticated:
        return redirect('/login/')

    # 通过 user 反查 Student（OneToOne 反向访问）
    try:
        student = request.user.student      # ↑ 注意小写
    except Student.DoesNotExist:
        return render(request, 'login.html',
                      {'error': '此账号不是学生账号'})

    # 这个学生的所有成绩
    scores = Score.objects.filter(student=student).order_by('-exam_date')
    return render(request, 'scores.html',
                  {'student': student, 'scores': scores})


def student_logout(request):
    logout(request)
    return redirect('/login/')

<!DOCTYPE html>
<html>
<head><meta charset="UTF-8"><title>智慧星 · 学生登录</title></head>
<body style="font-family:sans-serif; max-width:360px; margin:80px auto;">
    <h2>🎓 智慧星 · 学生登录</h2>
    <form method="post">
        {% csrf_token %}
        <input name="sno" placeholder="学号"
               style="width:100%; padding:8px; margin:5px 0;">
        <input name="password" type="password" placeholder="密码"
               style="width:100%; padding:8px; margin:5px 0;">
        <button style="width:100%; padding:10px; background:#3B6B9A; color:#fff; border:none;">登录</button>
    </form>
    {% if error %}<p style="color:#B83B2E">❌ {{ error }}</p>{% endif %}
</body>
</html>

<!DOCTYPE html>
<html>
<head><meta charset="UTF-8"><title>我的成绩</title></head>
<body style="font-family:sans-serif; max-width:720px; margin:30px auto;">

    <h2>👋 {{ student.name }} ({{ student.sno }}) 的成绩</h2>
    <p>班级：{{ student.klass }} ·
       <a href="/logout/">退出</a></p>

    <table border="1" cellpadding="6"
           style="border-collapse:collapse; width:100%;">
        <tr><th>科目</th><th>成绩</th><th>考试日期</th></tr>
        {% for s in scores %}
            <tr>
                <td>{{ s.subject }}</td>
                <td>{{ s.score }}</td>
                <td>{{ s.exam_date }}</td>
            </tr>
        {% empty %}
            <tr><td colspan="3">暂无成绩</td></tr>
        {% endfor %}
    </table>
</body>
</html>