Ticket #4362: preview.diff

django/contrib/formtools/preview.py

@@ -101 +101 @@
         f = self.form(request.POST, auto_id=AUTO_ID)
         context = {'form': f, 'stage_field': self.unused_name('stage'), 'state': self.state}
         if f.is_valid():
+            self.edit_field = self.unused_name('edit')
+            context['edit_field'] = self.edit_field
             context['hash_field'] = self.unused_name('hash')
             context['hash_value'] = self.security_hash(request, f)
             return render_to_response(self.preview_template, context, context_instance=RequestContext(request))
@@ -110 +112 @@
     def post_post(self, request):
         "Validates the POST data. If valid, calls done(). Else, redisplays form."
         f = self.form(request.POST, auto_id=AUTO_ID)
-        if f.is_valid():
+        if not request.has_key(self.edit_field) and f.is_valid():
             if self.security_hash(request, f) != request.POST.get(self.unused_name('hash')):
                 return self.failed_hash(request) # Security hash failed.
             return self.done(request, f.cleaned_data)