Forms

User input can't be trusted: fields may be missing, the wrong type, or malicious. Django forms: • render HTML inputs, • validate and clean submitted data, • show clear error messages, • protect against cross-site request forgery with {% csrf_token %}.

A ModelForm builds a form directly from a model's fields — the quickest way to create and edit records.