Python Django无法加密用户密码信息，也无法检索用户配置文件信息

我有一个web应用程序，它有用户注册和更新用户配置文件。我正在使用密码哈希器

这是我的模特

class UserProfile(models.Model):

    user = models.OneToOneField(User)

    website = models.URLField(blank=True)
    picture = models.ImageField(upload_to='profile_images', blank=True)

    def __unicode__(self):
        return self.user.username

这是我的表格

class UserForm(forms.ModelForm):
    username = forms.CharField(
        max_length=254,
        widget=forms.TextInput(attrs={'class': "form-control input-lg",'placeholder': 'username'}),
    )
    email = forms.CharField(
        max_length=254,
        widget=forms.TextInput(attrs={'class': "form-control input-lg",'placeholder': 'email'}),
    )
    password = forms.CharField(widget=forms.PasswordInput(attrs={'class': "form-control input-lg",'placeholder': 'password'}))
    password2 = forms.CharField(widget=forms.PasswordInput(attrs={'class': "form-control input-lg",'placeholder': 'confirm password'}),label="Confirm password")

    class Meta:
        model = User
        fields = ('username', 'email', 'password','password2')

class UserProfileForm(forms.ModelForm):
    website = forms.URLField(widget=forms.TextInput(attrs={'class': "form-control input-lg",'placeholder': 'website'}))
   picture=form.Imagefield
    class Meta:
        model = UserProfile
        fields = ('website', 'picture')

这是我的views.py更新和注册

def register(request):

registered = False


if request.method == 'POST':

    user_form = UserForm(data=request.POST)
    profile_form = UserProfileForm(data=request.POST)

    if user_form.is_valid() and profile_form.is_valid():

        user = user_form.save()

        user.set_password(user.password)
        user.save()

        profile = profile_form.save(commit=False)
        profile.user = user

        if 'picture' in request.FILES:
            profile.picture = request.FILES['picture']

        profile.save()

        registered = True

    else:
        print user_form.errors, profile_form.errors

else:
    user_form = UserForm()
    profile_form = UserProfileForm()

return render(request,
        'Survey/register.html',
        {'user_form': user_form, 'profile_form': profile_form, 'registered': registered} )

@login_required
def update(request):
updated = False
user = request.user
profile=request.userprofile
# If it's a HTTP POST, we're interested in processing form data.
if request.method == 'POST':

    user_form = UserForm(data=request.POST,instance=user)
    profile_form = UserProfileForm(data=request.POST,instance=profile)

    if user_form.is_valid() and profile_form.is_valid():

        user = user_form.save()

        u = User.objects.get(username=user.username)
        u.set_password(user.password)
        u.save()

        profile = profile_form.save(commit=False)
        profile.user = user

        if 'picture' in request.FILES:
            profile.picture = request.FILES['picture']

        profile.save()

        update = True

    else:
        print user_form.errors, profile_form.errors

else:
    user_form = UserForm(instance=user)
    profile_form = UserProfileForm()

return render(request,
        'Survey/update_profile.html.html',
        {'user_form': user_form,'profile_form': profile_form,'updated': updated} )

我有两个问题

我能够检索用户信息，但不能检索用户配置文件信息

我更新的密码字段存储时没有散列（在注册期间，密码存储时使用散列），因此由于身份验证失败，我无法使用新密码登录

---

有什么帮助吗？

问题在更新视图中。您可以在以下行中“双重散列”密码：

u=User.objects.get（username=User.username）u.set\u password（User.password）u.save（）

谢谢，我得到了那部分