Add auth

noenergysoftware · May 14, 2019 · d2bcfcd · d2bcfcd
1 parent d79b7c0
commit d2bcfcd
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/rateMyCourse/views/models.py b/rateMyCourse/views/models.py
@@ -14,6 +14,11 @@
 def update_user_profile_photo(request):
 
     try:
+        if not auth.auth(request):
+            return HttpResponse(json.dumps({
+                'status': -100,
+                'errMsg': 'cookies 错误',
+            }), content_type="application/json")
         user_id = request.POST['user_id']
         profile_photo = request.POST['profile_photo']
         user = User.objects.get(id=user_id)