bugs fix.

tag.py

@@ -2,6 +2,7 @@
 
 import math
 from common import BaseHandler,time_span
+from config import admin
 import time
 import tornado.web
 
@@ -30,6 +31,7 @@ def get(self,tagname):
             time_span=time_span,p=p,tag_sidebar=tag_sidebar)
 
     def post(self,tagname):
+        assert self.current_user['username'] in admin
         self.db.tags.update({'name':tagname},{'$set':{'sidebar':self.get_argument('sidebar','')}})
         self.redirect('/tag/%s' % tagname)
 

templates/tag.html

@@ -28,7 +28,7 @@
 {% block sidebar %}
 {{tag_sidebar}}
 
-{% if current_user['username'] in admin_list %}
+{% if current_user and current_user['username'] in admin_list %}
 <section class='box'>
     <header><h3>修改边栏</h3></header>
     <form method="post">