Something I've done in the past when upgrading Mezzanine projects from
one version to another is to use a diffing tool (most VCS have one
already) to spot differences.
I usually just copy the settings.py and urls.py provided by vanilla
Mezzanine and diff them against what I have in my project. With the diff
I can easily spot changes that where added upstream and tell them apart
from the tweaks I've made to my project locally.
The same approach should work for the configuration files for
deployment. Combine that with the post written by Douglas and any dev
should be able to secure their site.
--
You received this message because you are subscribed to the Google Groups "Mezzanine
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.