Re: Slow Performance of Django Web App

[Lucifer Black]

thank you you already learned how I updated the AP earlier today

Get Outlook for Android

From: django-users@googlegroups.com  on behalf 
of Vishesh Mangla 
Sent: Wednesday, June 14, 2023 1:12:52 AM
To: django-users@googlegroups.com 
Subject: Re: Slow Performance of Django Web App

One important question, what webserver are you using?

On Wed, Jun 14, 2023 at 10:34 AM Shaheed Haque 
mailto:shaheedha...@gmail.com>> wrote:
Have you tried using https://django-debug-toolbar.readthedocs.io/en/latest/? It 
can be a little fiddling about with, but it's time based profiling support has 
been invaluable in tracking down a few critical queries.

On Sun, 11 Jun 2023, 20:00 Kunal Mittal, 
mailto:mittalkuna...@gmail.com>> wrote:
I've a django application serving 10k+ users daily, that application has 
everything to be on the top of performance metrics but still some API's have 
high latencies, application serves lots of pages with nice css and various 
images, on most the pages they are being served by s3 while on some it's via 
django static files. We have implemented caching on akamai for every static 
file that application serves, whenever that cache disappears latency of each 
and every API spikes exponentially, at that time even loading metrics becomes a 
pain, server does not pick those requests. Can anyone suggest what's going on 
here.

--
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/d32868ba-a2df-41e3-8f41-3ecc3c1b3471n%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CAHAc2je1B-m24UtOCjfK_VwQj1TYrdQH8czBS-bLotPsx1hGyw%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CACaE8x6HB%3DVB2bvYCtSbszcEELXqaojWVVKW1kZj0BKguF9mMQ%40mail.gmail.com.

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/DB9P193MB15964ABA07538DD912AB020EF458A%40DB9P193MB1596.EURP193.PROD.OUTLOOK.COM.

associate Developers for Google

[Lucifer Black]

Is there anyone that wants a job at google developer at home looking for three 
people


Get Outlook for Android

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/DB9P193MB15964FB814BFEBE1A8A33AEFF45BA%40DB9P193MB1596.EURP193.PROD.OUTLOOK.COM.

Re: Undelivered Mail Returned to Sender

[Lucifer Black]

thank you!!

Get Outlook for Android

From: django-users@googlegroups.com  on behalf 
of Steven Lizhi 
Sent: Wednesday, June 14, 2023 9:17:21 PM
To: django-users@googlegroups.com 
Subject: Re: Undelivered Mail Returned to Sender

Maybe you can use email cc param to send more email users.

On Wed, Jun 14, 2023 at 8:19 PM Precious Imoniakemu 
mailto:preciousimoniak...@gmail.com>> wrote:
invoice_html = html2pdf('product/invoice.html', context)

subject = 'Invoice for your order'
message = 'Please find attached the invoice for your order. 
This is a no reply mail but you can contact us through 
supp...@domainname.com for any enquiry.'
from_email = settings.EMAIL_HOST_USER
to_email = order.email

# Convert invoice_html to a File object
invoice_file = BytesIO(invoice_html)

email = EmailMessage(subject, message, from_email, [to_email])
email.attach(
'invoice.pdf', invoice_file.getvalue(), 'application/pdf')
email.send()

subject_ = 'Notice for an order'
message_ = f'Please find notice information for { 
order.full_name } new order.'
from_email_ = settings.EMAIL_HOST_USER
to_email_ = 'ad...@domainname.com'

notice = EmailMessage(subject_, message_,
  from_email_, [to_email_])
notice.attach(
'invoice.pdf', invoice_file.getvalue(), 'application/pdf')
notice.send()

EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend'
EMAIL_HOST = os.getenv('EMAIL_HOST') 
#mail.privateemail.com
EMAIL_PORT = os.getenv('EMAIL_PORT') #465
EMAIL_HOST_USER = os.getenv('EMAIL_HOST_USER')
EMAIL_HOST_PASSWORD = os.getenv('EMAIL_HOST_PASSWORD')
EMAIL_USE_TLS = False
EMAIL_USE_SSL = True
I tried sending mail to from my privateemail i got from namecheap to gmail but 
it gives thr content below: This is the mail system at host 
mailout-pe-b.jellyfish.systems.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients.

--
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/d77e903b-b210-43b0-9315-49abf082c60bn%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CAO_rqR5qbU%3Dwu6LSi8B89DYx04i_G%2BRUjA7T5VGE6TuxY9rMhQ%40mail.gmail.com.

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/DB9P193MB1596B08F0686C3D3182C14BAF458A%40DB9P193MB1596.EURP193.PROD.OUTLOOK.COM.

Re: Freelance Django and Python work

[Lucifer Black]

hey how are you doing today what all experience do you have and how long
have you been working with python

On Wed, Jun 14, 2023, 11:39 PM 'Abul Kashim 1811949642' via Django users <
django-users@googlegroups.com> wrote:

> Hi, you can hire me, easily, i provided a e-commerce website or other many
> system using django as a freelancer. I am also doing a remote job.
>
> On Thu, Jun 15, 2023 at 12:29 AM Shams Ulhaq 
> wrote:
>
>> Hi
>> I am shamasulhaq
>> From Pakistan
>> I am working on python
>> Django Django rest framework celery fastapi flask redis Django channels
>> I have 3 years of experience in python
>> My cv is attached with this mail
>> Kindly find the attachment
>>
>> On Tue, 13 Jun 2023, 16:30 אורי,  wrote:
>>
>>> Hi,
>>>
>>> I'm looking for a programmer to hire as a freelancer for Django and
>>> Python work.
>>>
>>> - Experience with Python and Django
>>> - Experience with open source
>>> - Committed to the Django repository on GitHub - an advantage
>>> - Committed to other open-source projects in Python - an advantage
>>> - Experience with Stack Overflow -  an advantage
>>> - BSc or BA in computers or science (math, physics) -  an advantage
>>> - Knowledge of HTML, CSS, and JavaScript - an advantage
>>> - Can issue receipts
>>>
>>> I need about 5 hours per month on average. Some months I might need up
>>> to 15 hours per month. Some months I might not need anything. The work is
>>> remote. My project is open source. I can give you a free license to
>>> PyCharm. My website is at https://en.speedy.net/ and
>>> https://github.com/speedy-net/speedy-net
>>>
>>> To apply please send one email to jobs+jango-freelan...@speedy.net,
>>> with your name, your email address, where you live, your experience, how
>>> many commits you committed to Django, how many commits you committed to
>>> other open source projects, a link to your profile on LinkedIn, a link to
>>> your profile on GitHub, a link to your profile on Stack Overflow, your
>>> diploma if you have any, how much you charge per hour and in which currency
>>> (I prefer USD or Euro), and if you can issue receipts. If you don't have a
>>> profile on one of the above websites please mention this too.
>>>
>>> Thanks,
>>> Uri Rodberg, Speedy Net.
>>> אורי
>>> u...@speedy.net
>>>
>>> --
>>> You received this message because you are subscribed to the Google
>>> Groups "Django users" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to django-users+unsubscr...@googlegroups.com.
>>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/django-users/CABD5YeHjQyFa75Mgq7nzcJ6AoX-WDeu75OOPfa2OngG2VTMaDQ%40mail.gmail.com
>>> 
>>> .
>>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Django users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to django-users+unsubscr...@googlegroups.com.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/django-users/CACbcXAV87Bx6Narq3v3GrSG1cJ5fnr%2BMX8ysbB5o3HKL6%2BOsEQ%40mail.gmail.com
>> 
>> .
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-users/CAGpwq2rCxEtO1DZkmyeXHYAJMPn7dfLWP-c5_RF3S4CpLMRqDw%40mail.gmail.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CAK1_9gjGVA-i1VnuBCkCiBavd%3Dd1kjOeb-G6gBHzCYHvc8MLDg%40mail.gmail.com.

Re: Demonstration of patching against CVE-2023-31047

[Lucifer Black]

It's only getting stuck in part of the loop because you're not putting a action 
after the phrase you said you are passionate against cve of 23 and you are 
trying to use it as a JPEG image but then you would have to clarify where the 
jpeg image needs to resonate to you're just having it boot loop over and over 
again because you're just telling it to go nowhere I'll fix for you in just a 
second

Get Outlook for Android


From: django-users@googlegroups.com  on behalf 
of optimusprime fig 
Sent: Monday, June 12, 2023 4:15:33 PM
To: django-users@googlegroups.com 
Subject: Re: Demonstration of patching against CVE-2023-31047

Thank you! I have tried patching to 4.2.1 which disallows the multiple to be 
set as True on the form widget. However, I have struggled to get a working 
implementation up that allows multiple images of a certain file type only to be 
uploaded. I am now able to accidentally allow all file types up even without 
one file of the required file type as per the app pre-patch. I.e. pre-patch, 
the form, if submitted with at least one file of the required types, e.g. a 
JPG, would pass validation and allow potentially harmful file types up onto the 
server alongside it. Now I can upload all file types regardless.

Is it best to scrap all multiple file upload implementations that are set to 
True for multiple once a patch such as this has been released?And bascially 
start from scratch, adding in approriate validation for each file, say as part 
of a loop?

Thanks!

On Mon, 12 Jun 2023 at 20:47, Sebastian Jung 
mailto:sebastian.ju...@gmail.com>> wrote:
Use django >= 4.2.1

 https://security.snyk.io/vuln/SNYK-UBUNTU2204-PYTHONDJANGO-5492023

5t00 mailto:stuartbealesoftw...@gmail.com>> 
schrieb am Mo., 12. Juni 2023, 20:32:
Hi all,

I am new to Django and am looking to demonstrate how the application of a 
Django patch can prevent against multiple file uploads in light of the 
recognised vulnerability outlined in CVE-2023-31047.

If anyone is able to point me towards any simple examples of multiple file 
upload app tutorials or github repositories that would have worked pre-patch, 
and how they might be updated to allow for multiple file uploads whereby all 
files are validated safely post-patch, that would be greatly appreciated!

Thanks in advance :)

--
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/2b457b78-8ed0-4ff7-a7e3-ac7f620583f3n%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CAKGT9mzxPLO6pTWT%2BVraKfF2EqD_HcBxtXtqNtaAu272ZwNNJA%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CAPBNwvKrRgO4KBCvPa51FMe5xubrNk3zX%2BNEGjfpzD7ke%2BYfOQ%40mail.gmail.com.

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/DB9P193MB15965F4CF6507D7ACB95AAA3F454A%40DB9P193MB1596.EURP193.PROD.OUTLOOK.COM.