For use with upload_form:
csrf_token Token for detecting CSRF.
report_success Boolean. Whether to tell the user the db was changed.
+ db_changed Boolean. Whether the previous upload changed db content.
+ Different from report_success because "previous upload"
+ ignores session expiration. (Unlike report_success,
+ db_changed is a form variable, not a session variable.)
session_expired Boolean. Whether the session has expired.
last_key Token to detect duplicate uploads.
db
name="csrf_token"
value="${csrf_token}"
/>
+ % if db_changed is not None:
+ <%doc>This is a hack. It should be fixed so that only double-upload
+ detecting forms unconditionally generate this element.</%doc>
+ <input type="hidden"
+ name="db_changed"
+ value="${db_changed}"
+ />
+ % endif
</%def>
<%def name="user_row(tabindex, havecreds, user)">