From ae208d6b3944e6825c003a5e2b9910fe7b76929f Mon Sep 17 00:00:00 2001
From: DengDai <29502593+zzhhxx@users.noreply.github.com>
Date: Mon, 24 Nov 2025 16:59:58 +0800
Subject: [PATCH] fix: referrer

---
 app/__init__.py | 6 +++++-
 app/forms.py    | 8 --------
 config.py       | 1 +
 3 files changed, 6 insertions(+), 9 deletions(-)

diff --git a/app/__init__.py b/app/__init__.py
index 251ed1d..7db149d 100644
--- a/app/__init__.py
+++ b/app/__init__.py
@@ -24,10 +24,14 @@ def create_app(config_name='default'):
     :return: Flask app instance
     """
     app = Flask(__name__)
-    
+
     # 1. 加载配置
     app.config.from_object(config[config_name])
     config[config_name].init_app(app)
+
+    # 信任代理转发的头信息
+    from werkzeug.middleware.proxy_fix import ProxyFix
+    app.wsgi_app = ProxyFix(app.wsgi_app, x_for=1, x_proto=1, x_host=1)
     # 2. 初始化扩展
     db.init_app(app)
     migrate.init_app(app, db)
diff --git a/app/forms.py b/app/forms.py
index 05e8135..6bf3474 100644
--- a/app/forms.py
+++ b/app/forms.py
@@ -5,9 +5,6 @@ from .models import User
 from wtforms_sqlalchemy.fields import QuerySelectField
 from .filters import REASON_TRANSLATIONS
 
-def get_active_partner_sites():
-    return PartnerSite.query.filter_by(is_active=True).order_by(PartnerSite.name)
-
 class SearchForm(FlaskForm):
     search_term = StringField(
         '输入用户名或邮箱进行查询', 
@@ -39,11 +36,6 @@ class LoginForm(FlaskForm):
     remember_me = BooleanField('记住我')
     submit = SubmitField('登录')
 class ReportForm(FlaskForm):
-    # reported_pt_site = StringField(
-        # '被举报用户所在的 PT 站点', 
-        # validators=[DataRequired(), Length(min=2, max=100)],
-        # render_kw={"placeholder": "例如：some.site.com"}
-    # )
     reported_pt_site = SelectField('违规站点', validators=[DataRequired()])
     reported_username = StringField(
         '被举报的用户名',
diff --git a/config.py b/config.py
index 1055566..bf98951 100644
--- a/config.py
+++ b/config.py
@@ -14,6 +14,7 @@ class Config:
     # CSRF 配置
     WTF_CSRF_ENABLED = True
     WTF_CSRF_TIME_LIMIT = None
+    WTF_CSRF_CHECK_DEFAULT = False
 
     # Session 配置
     SESSION_TYPE = 'redis'