If you want to prevent your client to download your code with the
method Nick describes just choose some random URLs for the remote_api
and the deferred handler

Your app.yaml part looks like

========================
- url: /vG68wMbHF0LFwYh
  script: $PYTHON_LIB/google/appengine/ext/remote_api/handler.py
  login: admin

- url: /KCtDS6p50mEetNE
  script: $PYTHON_LIB/google/appengine/ext/deferred/handler.py
  login: admin
========================

random URL generated with
-----------------
import string, random
chs = string.ascii_letters + string.digits
print ''.join( random.choice(chs) for i in xrange(15) )
-----------------

If you still want to download the source code with the method use the following

remote_api_shell.py your_app_id /vG68wMbHF0LFwYh

for the deferred call use

defer(eval, expr, _url='/KCtDS6p50mEetNE')


2010/5/11 Barry Hunter <[email protected]>:
> Well on the stackoverflow page linked from that thread, its written
>
> "If your app was written in Python, and had both the remote_api and
> deferred handlers defined, it's possible to recover your source code
> through the interaction of these two APIs."
>
> Written by Nick Johnson
>
>
>
> On 11 May 2010 19:54, djidjadji <[email protected]> wrote:
>> If it was possible to get the source code through remote_api or
>> appcfg.py-hacking it would be possible for the client who only has the
>> use right of the code to download it too. The client is administrator
>> of the app too.
>> This is not what a number of GAE developers would like to see possible.
>>
>> 2010/5/11 Darien Caldwell <[email protected]>:
>>> Actually, you can, if you happen to have remote API enabled:
>>>
>>> http://groups.google.com/group/google-appengine/browse_thread/thread/31025ae9b5332a2d/b81d150dcc39cf5c
>>>
>>> In other instances, no.
>>>
>>> --
>>> You received this message because you are subscribed to the Google Groups 
>>> "Google App Engine" group.
>>> To post to this group, send email to [email protected].
>>> To unsubscribe from this group, send email to 
>>> [email protected].
>>> For more options, visit this group at 
>>> http://groups.google.com/group/google-appengine?hl=en.
>>>
>>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups 
>> "Google App Engine" group.
>> To post to this group, send email to [email protected].
>> To unsubscribe from this group, send email to 
>> [email protected].
>> For more options, visit this group at 
>> http://groups.google.com/group/google-appengine?hl=en.
>>
>>
>
> --
> You received this message because you are subscribed to the Google Groups 
> "Google App Engine" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to 
> [email protected].
> For more options, visit this group at 
> http://groups.google.com/group/google-appengine?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to