Specify session in the form constructor

boards/forms/__init__.py

@@ -203,9 +203,18 b' class PostForm(NeboardForm):'
     timestamp = forms.CharField(widget=forms.HiddenInput(), required=False)
     iteration = forms.CharField(widget=forms.HiddenInput(), required=False)
 
-    session = None
     need_to_ban = False
 
+    def __init__(self, data=None, files=None, auto_id='id_%s', prefix=None,
+                 initial=None, error_class=ErrorList, label_suffix=None,
+                 empty_permitted=False, field_order=None,
+                 use_required_attribute=None, renderer=None, session=None):
+        super().__init__(data, files, auto_id, prefix, initial, error_class,
+                         label_suffix, empty_permitted, field_order,
+                         use_required_attribute, renderer)
+
+        self.session = session
+
     def clean_title(self):
         title = self.cleaned_data['title']
         if title:

boards/views/all_threads.py

@@ -96,8 +96,7 b' class AllThreadsView(BaseBoardView, Pagi'
             return redirect(self.get_reverse_url())
 
         form = ThreadForm(request.POST, request.FILES,
-                          error_class=PlainErrorList)
-        form.session = request.session
+                          error_class=PlainErrorList, session=request.session)
 
         if form.is_valid():
             return Post.objects.create_from_form(request, form, None)

boards/views/api.py

@@ -98,11 +98,11 b' def api_add_post(request, opening_post_i'
     post = None
     if request.method == 'POST':
         if opening_post:
-            form = PostForm(request.POST, request.FILES, error_class=PlainErrorList)
+            form_class = PostForm
         else:
-            form = ThreadForm(request.POST, request.FILES, error_class=PlainErrorList)
-
-        form.session = request.session
+            form_class = ThreadForm
+        form = form_class(request.POST, request.FILES,
+                          error_class=PlainErrorList, session=request.session)
 
         if form.need_to_ban:
             # Ban user because he is suspected to be a bot

boards/views/tag_threads.py

@@ -72,8 +72,8 b' class TagView(AllThreadsView, Dispatcher'
             return redirect('tag', tag_name)
         else:
             form = ThreadForm(request.POST, request.FILES,
-                              error_class=PlainErrorList)
-            form.session = request.session
+                              error_class=PlainErrorList,
+                              session=request.session)
 
             if form.is_valid():
                 return Post.objects.create_from_form(request, form, opening_post=None)

boards/views/thread/thread.py

@@ -76,8 +76,8 b' class ThreadView(BaseBoardView, FormMixi'
 
         if not opening_post.get_thread().is_archived():
             form = PostForm(request.POST, request.FILES,
-                            error_class=PlainErrorList)
-            form.session = request.session
+                            error_class=PlainErrorList,
+                            session=request.session)
 
             if form.is_valid():
                 return Post.objects.create_from_form(request, form, opening_post)