Re: More secure user password reset

2008-06-29 Thread Craig Ogg
On Sat, Jun 28, 2008 at 4:48 PM, Simon Willison <[EMAIL PROTECTED]> wrote: > > On Jun 28, 11:21 pm, Luke Plant <[EMAIL PROTECTED]> wrote: >> MD5 is 8 chars shorter. Do we really need SHA-1? If I understand >> correctly, the only known vulnerability with MD5 is the ability to >> force collisions,

Re: Aggregation Updates

2008-06-01 Thread Craig Ogg
On Sun, Jun 1, 2008 at 4:39 AM, Russell Keith-Magee <[EMAIL PROTECTED]> wrote: > SELECT author.id, author.name, author.age, COUNT(book.id) > FROM author INNER JOIN book ON author.id=book.author_id > GROUP BY author.id, author.name, author.age; > > is the same as > > SELECT author.id,

RE: Database concurency (was: Threading improvements)

2008-04-05 Thread Craig Ogg
As has been said by others, I think this thread is no longer about threads or even interprocess synchronization. For web apps, the norm is multiple web servers talking to a single database. This should rule out any form of synchronization mechanism outside of the database. In fact, the whole

Re: Help needed with X-Forwarded-For

2007-09-20 Thread Craig Ogg
On 9/20/07, Jacob Kaplan-Moss <[EMAIL PROTECTED]> wrote: > Django's SetRemoteAddrFromForwardedFor middleware used to take the > *first* item in the X-F-F header, but after > http://code.djangoproject.com/ticket/3872 was filed we changed it to > take the *last* IP. > That ticket use this article

Re: Request data encoding

2007-08-02 Thread Craig Ogg
On 8/2/07, Jacob Kaplan-Moss <[EMAIL PROTECTED]> wrote: > * Try to decode the form data using ``settings.DEFAULT_CHARSET``. In > most cases this'll be UTF-8, but when it's not we can try to assume > that data's being POSTed back in the same encoding we're serving it up > in. > * If that fails and

Re: Request data encoding

2007-08-02 Thread Craig Ogg
On 8/2/07, ludvig.ericson <[EMAIL PROTECTED]> wrote: > On Aug 2, 11:02 pm, Gábor Farkas <[EMAIL PROTECTED]> wrote: > > Jacob Kaplan-Moss wrote: > > > On 8/2/07, Daniel Brandt <[EMAIL PROTECTED]> wrote: > > >> I am recieving POST-data that is submitted to my application not via a > > >> form or a