Django Boston Reboot

group) Best, Dave -- You received this message because you are subscribed to the Google Groups "Django users" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscr...@googlegroups.com. To view this discussion on the web vi

Re: I need to create account using sso Google in Django rest framework Amy suggestions?

Django AllAuth might be a good option: Welcome to django-allauth! — django-allauth 0.43.0 documentation On Wed, May 3, 2023 at 5:22 PM Stan Hiebah wrote: > -- > You received this message because you are subscribed to the Google Groups >

Re: Cache pages for fast loading

I have to use IIS at my job. I don't think redis is available on Windows. I use memcached which is similar to redis and can be run as a windows service and fully supported by Django's cache backend. If you absolutely want to use redis, then you'll probably want to spin up a Linux instance and run

Re: "pytest --doctests-modules" AlreadyRegistered error

I figured this out. I'm using Cookiecutter-Django, which puts a __init__.py for whatever reason in the root directory and this confuses pytest. If you delete this __init__.py, everything works fine. On Friday, July 31, 2020 at 8:53:39 PM UTC-4 Dave R wrote: > I am using doctests via pyt

"pytest --doctests-modules" AlreadyRegistered error

I am using doctests via pytest with the command "pytest --doctest-modules". Unfortunately, I keep getting the following error. I've already attached a screenshot. Does anyone understand what's causing and how to address it? Thanks! == ERRORS

Question about django.utils.autoreload

Hello, I'm trying to figure out how to rebuild my React.js project (with Django backend) and relaunch the Django dev server if a React.js file changes. The code below works, but it rebuilds React even if the only code changes are in Django. Can anyone suggest how to solve this problem?

Django package auto-installation

My new package: https://github.com/pandichef/indjections The basic idea: Installing third party Django packages should be one-line of code. I'm looking for feedback and/or contributors. Thanks! -- You received this message because you are subscribed to the Google Groups "Django users"

Django as an authentication server

A few weeks ago on this group, I asked for suggestions on how to enable logging into one Django app from another Django app. I didn't love the answers I got, so I rolled out my own solution: https://github.com/pandichef/djangito I'd love to get some feedback on this and/or find contributors

Re: Is there a package that enables one Django project to authenticate via a second Django project?

nterface from the remote user. > > https://docs.djangoproject.com/en/3.0/howto/auth-remote-user/ > > The reason I wouldn't use open id connect is because you still need a > local user object for each project in that case. > > Regards, > > Andréas > > > Den tor

Is there a package that enables one Django project to authenticate via a second Django project?

I keep running into this problem and started working on a custom solution... but before I spend hours on this, I want to confirm that such a package/solution doesn't already exist. I was working on a large project last year that involved a single set of users and many small applications. I

How to create custom registration form in django rest api?

I am creating an health care app which need to include patients and doctors account, i have created Doctor model which have various info of doctor now i want a serializer which maps this model to a proper html registration form. My problem is that i can get a normal form rendered but it is only

Lots of errors after deploying and going live

Hi guys, so this is a very general post, I have been working on a django blog following Corey Schafer's Django tutorial. Everything went smoothly on local machine, but once I deployed it, I am having all kinds of troubles. >From password_reset (still not solved) to uploading image ran into

Re: Big Problem After Going Live: NoReverseMatch at /login/ Reverse for 'password_reset' not found. 'password_reset' is not a valid view function or pattern name

t >> unchanged. Does anything change? >> >> -Jorge >> >> On Fri, Jan 31, 2020 at 9:21 PM Dave Ko > >> wrote: >> >>> >>> LOGIN_REDIRECT_URL = 'news:all_news' >>> >>> >>> all_news is the first page of the webs

Re: Big Problem After Going Live: NoReverseMatch at /login/ Reverse for 'password_reset' not found. 'password_reset' is not a valid view function or pattern name

et", which won't match. > > Let's try to rename that url conf to password_reset, and leave the rest > unchanged. Does anything change? > > -Jorge > > On Fri, Jan 31, 2020 at 9:21 PM Dave Ko > > wrote: > >> >> LOGIN_REDIRECT_URL = 'news:all_news' >

Re: Big Problem After Going Live: NoReverseMatch at /login/ Reverse for 'password_reset' not found. 'password_reset' is not a valid view function or pattern name

LOGIN_REDIRECT_URL = 'news:all_news' all_news is the first page of the website On Saturday, February 1, 2020 at 1:16:53 PM UTC+8, jlgimeno71 wrote: > > > > On Fri, Jan 31, 2020 at 8:33 PM Dave Ko > > wrote: > >> I also have some trouble with using signal,

Re: Big Problem After Going Live: NoReverseMatch at /login/ Reverse for 'password_reset' not found. 'password_reset' is not a valid view function or pattern name

LOGIN_REDIRECT_URL = 'news:all_news' On Saturday, February 1, 2020 at 12:20:29 PM UTC+8, jlgimeno71 wrote: > > > On Fri, Jan 31, 2020 at 5:35 PM Dave Ko > > wrote: > >> Hi everyone, >> >> I am pretty new to django programming, I was following a t

Re: Big Problem After Going Live: NoReverseMatch at /login/ Reverse for 'password_reset' not found. 'password_reset' is not a valid view function or pattern name

I also have some trouble with using signal, which works perfectly fine on localhost but not deployed On Saturday, February 1, 2020 at 12:20:29 PM UTC+8, jlgimeno71 wrote: > > > On Fri, Jan 31, 2020 at 5:35 PM Dave Ko > > wrote: > >> Hi everyone, >> >> I am

Re: Deploying a static website

If you want a simple way that manages all the deployment then use https://www.zappa.io/ Be warned- the IAM permissions for storage can be a pain (as with using most of AWS)! On Thu, 4 Jul 2019, 07:15 Nick Sarbicki, wrote: > The best way to deploy a static website is certainly on a bucket like

Re: ValueError at /admin/

What's in your urls.py at the project level? Do you have a copy of the urls.py that sit within the deleted app folder? On Sun, 16 Jun 2019, 09:09 anchal agarwal, wrote: > I recently deleted one of my app from my website directory. For deleting > app I removed that app name from settings.py also

Re: Django App - Database connection

These are the settings to use in settings.py: DATABASES = { 'default': { 'ENGINE': 'django.db.backends.mysql', 'NAME': 'DB-NAME', 'USER': 'USER', 'PASSWORD':'PASSWORD', 'HOST':'HOST', 'PORT': 'PORT', 'OPTIONS': {'charset': 'utf8'} } } *Dave Edwards* Email >

Re: Django App - Database connection

Apologies that was from when I used MySQL, please use the following for postgres: DATABASES = { 'default': { 'ENGINE': 'django.db.backends.postgresql', 'HOST':'HOST', 'PORT':'PORT', 'USER':'USERNAME', 'PASSWORD':'PASSWORD', 'NAME': 'DATABASE NAME', } } *Dave Edwards

DRF structure query

Hi, Being fairly new to DRF, I'm just wondering on the best ways of going about stucturing an api which has man endpoints. Basically is there a good reason not to put different categories of endpoints together in different apps, like the ones for user data, ones for app data etc. And then

Re: Make mobile app from webapp

, 07. jan 2019. 19:10 maunish dave je > napisao/la: > >> Hi i have a website built with django and now i want to make a mobile app >> for it how to do it any suggestions? >> >> -- >> You received this message because you are subscribed to the Google Groups >

Make mobile app from webapp

Hi i have a website built with django and now i want to make a mobile app for it how to do it any suggestions? -- You received this message because you are subscribed to the Google Groups "Django users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: How to create two different login system

return the user > object according to the user type. > > You can try this or You can just extend the AbstractUser class. > > On Friday, December 14, 2018 at 11:58:50 AM UTC+5:30, maunish dave wrote: >> >> My project contains two user one for managers and other for employees any

Confusion in user and superuser

Can anyone help me with the topic that when superuser will be created and when user will be created? When I type in a command prompt "Python manage.py createsuperuser" it creates a superuser But when I used Usercreationform to create user it is creating normal user so how to create superuser

How to create two different login system

My project contains two user one for managers and other for employees any suggestions? -- You received this message because you are subscribed to the Google Groups "Django users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: Help with data bound ModelChoiceField

I think you should just call all object instead of using values ( ) and __str__ will give you the names of customer I am not sure but this should work On Wed 12 Dec, 2018, 3:46 AM madjardi, wrote: > aybe it help You > >

Problem matching paths deploying with WSGI on Ubuntu mounted not at root

there are common mistakes that people make documented somewhere. I’ve spent lots of time searching and experimenting. Dave Briccetti https://davebsoft.com -- You received this message because you are subscribed to the Google Groups "Django users" group. To unsubscribe from this grou

Re: Use Email to Login With Django Auth

Do not use django login authentication instead make your own authentication page On Fri 2 Nov, 2018, 12:12 AM Deb Das, wrote: > You can query for the given email and get the username, then getting the > username do normal Django authentication. > > On Thu 1 Nov, 2018, 5:39 PM Ryan Shepard >>

Re: new to django

Chech if you have installed django or not Type this command on cmd ' django pip install' On Wed 24 Oct, 2018, 8:05 PM Aditya Bohra, wrote: > > > On Thursday, October 18, 2018 at 2:51:02 PM UTC+5:30, shubham...@gmail.com > wrote: >> >> "django-admin startproject mysite" i tried to run this in

Connecting to remote host like Twitch to monitor chat using websockets

Greetings, Is it possible to use Django Channels and websockets to monitor the chat in twitch rooms, or other sites with chat rooms? I would like to display extra graphics for users who send cheers of high amounts, like 1000, 2000, etc. I have the display worked out in Django where I'm

JSON editor for admin

Hi All Can anyone recommend a working JSON editor that can be added to a Django 1.11.x admin ? For what its worth - the field I want to use the JSON editor on is a django.contrib.postgres.fields JSONField. Thanks Dave -- You received this message because you are subscribed to the Google

Channels Redis/channelfull spam without any ws connections.

> > 1491540549.292837 [0 lua] "LPOP" "asgi:daphne.response.tJbmVMXFGX!" > 1491540549.343335 [0 unix:/var/run/redis/redis.sock] "EVALSHA" > "3640886a0c8901ca9188f5f7a5f7a346145b9c5f" "1" > "asgi:daphne.response.tJbmVMXFGX!" > 1491540549.343373 [0 lua] "LPOP" "asgi:daphne.response.tJbmVMXFGX!" >

Django software docs

All, Can anyone point me to some software documentation, (I work with 3D visualization software) that utilizes Django? Manuals, tutorials, video links and such? thanks / Dave -- You received this message because you are subscribed to the Google Groups "Django users" group. To u

Django heroku deploy results in site cant be reached error

My full django deploy issue can be found here: http://stackoverflow.com/questions/37714253/django-deploy-on-heroku-gives-site-cant-be-reached-response In summary, my app works locally with runserver, and also works perfectly when I use heroku local on 0.0.0.0:5000. When I introduce gunicorn my

Re: Why is my Django template not displaying?

:58:33 AM UTC-7, Dave N wrote: > > Assuming my model contains data, I have myapp/views.py: > > from django.template import RequestContextfrom django.shortcuts import > renderfrom .models import Historyimport datetime > def live_view(request): > context = RequestContext(requ

Why is my Django template not displaying?

Assuming my model contains data, I have myapp/views.py: from django.template import RequestContextfrom django.shortcuts import renderfrom .models import Historyimport datetime def live_view(request): context = RequestContext(request) plays_list =

Django custom auth_user_model error

I've been trying to customize a django auth_user_model, and it has led me to the latest error/issue, which can be found here: http://stackoverflow.com/questions/37197771/django-attributeerror-usermanager-object-has-no-attribute-create-superuser Please help get me out of Django config hell, so I

Development using django: wireframes enough to begin?

I'm trying to understand how using django for development works. Can a backend developer begin with just a wireframe? Isn't it possible to develop scripts while someone else is writing the html/css code? (like working on the front end and back end at the same time) For example: Creating a

Creating a QuerySet where the presence of a row is dependent on other rows in the result

I have a problem where I need to define a QuerySet where the conditions for including one row depend on evaluating values in one or more other rows in the QuerySet. Is there a way to manually construct a QuerySet by iterating over rows from another QuerySet and individually adding them to the

Re: [SPAM] Implementing User login expiration

Great solution Sam! On Tuesday, April 9, 2013 11:30:41 AM UTC-7, Sam Solomon wrote: > > Depending on if the expiration is a temporary thing or if you actually > want to permanently deactivate the user, this may be even simpler and > database efficient (and is what we use to ban users): > >

Setting up django with mongoengine on windows7

So I am trying to set mongo-engine as django's back-end and am having no luck :/ so if someone can point me in the direction of a really good guide to follow or can walk through setup with me that would be greatly appreciated -- You received this message because you are subscribed to the

Re: Request for comments on a new Open Source Paas platform for Django

On Tuesday, March 5, 2013 7:03:36 PM UTC, Bruno Girin wrote: > > So I'd much rather have the charm auto-generate part of the config in a > sensible way and then tell people: if you use Juju, don't provide those > settings in your config, the charm will do it. > ...and if they do? How is this

Re: I want to check for new orders in the background?

On Tuesday, March 5, 2013 1:38:14 PM UTC, frocco wrote: > > I want to query the orders database every 5 minutes and alert admins that > new orders have arrived. > Would I use signals for this? > Using a receiver attached to the post_save signal of your Order model would certainly be more

Re: Request for comments on a new Open Source Paas platform for Django

On Tuesday, March 5, 2013 1:17:13 PM UTC, Michael wrote: > > Are there other better options that wouldn't force people to change their > code to use the charm? > For the charm to be of sufficient value, it needs to be opinionated, otherwise it's going to suffer from trying to work

Re: Request for comments on a new Open Source Paas platform for Django

On Sunday, March 3, 2013 4:45:56 PM UTC, Bruno Girin wrote: > Patrick solved that problem by separating different config elements in > different files but this implies that juju'ised applications would need to > follow the same structure. Is that a good idea? If you're aiming for a PaaS-style

"Django Django" - a band for the next DjangoCon?

We missed them for this upcoming conference, but we gotta get these guys for the next one, you know, some evening entertainment. :) Check them out. They're actually pretty good. http://www.djangodjango.co.uk/ http://twitter.com/thedjangos http://soundcloud.com/djangodjango -- Dave Lampton

Re: superclass SingleObjectMixin

just being too lazy Thanks again! Dave On Apr 7, 11:45 am, Daniel Roseman <dan...@roseman.org.uk> wrote: > On Saturday, 7 April 2012 16:40:05 UTC+1, Dave wrote: > > > Hi, I need to manipulate my pk when using new class based views. In > > order to DRY I think what's

superclass SingleObjectMixin

): queryset = self.get_queryset() pk = pid_to_oid(self.kwargs.get('pk')) queryset = queryset.filter(pk=pk) obj = queryset.get() return obj Thanks in advance for the help. Dave -- You received this message because you are subscribed to the Google Groups "Django

Re: When is the django orm going to get a "group by" function ?

On 16 September 2011 22:57, dave bl <db.pub.m...@gmail.com> wrote: > On 16 September 2011 22:39, Jani Tiainen <rede...@gmail.com> wrote: >> 16.9.2011 15:27, dave bl kirjoitti: >>> >>> Hmm no I am not missing the point... I think the django devs are... >&g

Re: how to customize a form field, CSS style things.

On Fri, 16 Sep 2011 04:58:00 -0700 (PDT) "Kevin.X" <kevin.xia...@gmail.com> wrote: > Dave, > Thanks for your reply. But I want a more general way to specify the > class of a widget. Is that a little boring when you want a text input > with class 'text', but you

Re: When is the django orm going to get a "group by" function ?

On 16 September 2011 22:50, Cal Leeming [Simplicity Media Ltd] <cal.leem...@simplicitymedialtd.co.uk> wrote: > > > On Fri, Sep 16, 2011 at 1:50 PM, Cal Leeming [Simplicity Media Ltd] > <cal.leem...@simplicitymedialtd.co.uk> wrote: >> >> Dave - I think you are ha

Re: When is the django orm going to get a "group by" function ?

On 16 September 2011 22:39, Jani Tiainen <rede...@gmail.com> wrote: > 16.9.2011 15:27, dave bl kirjoitti: >> >> Hmm no I am not missing the point... I think the django devs are... >> sqlalchemy _has_ a group by. >> >> So I simply want to do this sql statem

Re: When is the django orm going to get a "group by" function ?

> Yes, there is. > > Asking for a GROUP BY function in Django's ORM misses the point > entirely of why an ORM exists. Django's ORM isn't SQL. Django's ORM > provides an abstraction layer that is able to make an arbitrary data > store appear like a collection of related objects. There's no >

Re: When is the django orm going to get a "group by" function ?

Hmm no I am not missing the point... I think the django devs are... sqlalchemy _has_ a group by. So I simply want to do this sql statement(using the django orm): select foo, count(foo), from bar group by foo; I _could_ use a .extra method to do this(and get stuck on $databases) ... or a loop...

When is the django orm going to get a "group by" function ?

When is the django orm going to get a "group by" function ? (this is srs buz ... Y NO HAZ?). I see that there have been various changes(getting closer! - with aggregates and annotate) ... and attempts in the past. Is there a "solid" reason for not supporting "group by" in the ORM ... (yet) ? --

Re: how to customize a form field, CSS style things.

'})) ...: In [3]: MyForm = CommentForm() In [4]: MyForm.as_p() Out[4]: u'Name: ' Dave On Fri, 16 Sep 2011 02:41:24 -0700 (PDT) "Kevin.X" <kevin.xia...@gmail.com> wrote: > Hi, folks > Is there any simple way to customize a form filed's style? I want to > add CSS c

Re: Problem with Foreign Key on self table and delete() object

the .save(). With my surprise all objects in this table was deleted :( In [7]: Test.objects.all() Out[7]: [, , , ] In [8]: obj1 = Test(host_name="othertest") In [9]: obj1.save() In [10]: obj1.delete() In [11]: Test.objects.all() Out[11]: [] Can I avoid this problem ? Thank you in adv

Problem with Foreign Key on self table and delete() object

(host_name='host1') In [29]: host1.delete() In [30]: Test.objects.all() Out[30]: [] Is this a django bug or I'm wrong something ? Thank you, Dave -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send e

Re: Writing my first view

Have you followed the whole of the tutorial? On 6 Jun 2011 07:41, "bahare hoseini" wrote: > hi there, > i use django vs1.3 > i started editing urls.py to look loke this: > > from django.conf.urls.defaults import * > > > > from django.contrib import admin > >

Re: Setting up dev/test/production environments on the server (dreamhost)

; one for me and small clients and the other is dedicated to one clients site. I just use my USD$10 per month DH account for svn and backing up my vps' via rsync. I can add another +1 for Nginx too. Cheers, Dave -- --- Dave Sayer | Bath Design We

django-cms and photologue

photologue. Having spent some time googling and looking through the docs, I have come no closer to an answer. I just want to display a photo that's been attached to a page. I thought it would be simple...perhaps it's a wood for the trees moment but i'd really appreciate some help. Cheers, Dave -- You

Re: Anyone got experience of using django-fiber cms?

tation and ended up choosing FeinCMS, which has been great, although lacking in some areas - either that or my knowledge/understanding of the docs is lacking to the point where I am coming to a grinding halt with the MPTT side of things. Anyway, cheers again for your response. Dave -- You receive

Re: Admin page select boxes smashed

ot;Django users" group. > To post to this group, send email to django-users@googlegroups.com. > To unsubscribe from this group, send email to > django-users+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/django-users?hl=en. >

Anyone got experience of using django-fiber cms?

and the documentation is pretty scant. Does anyone have any experience of using fiber and have any example sites running on this? Cheers, Dave -- --- Dave Sayer | Bath Design Web design & development with standards --- mobile:

Re: How to insert a csrf_token when entering datas through a bot ?

On 12 April 2011 22:09, JustinMarsan wrote: > Hello, > > What would be the best way to allow some bots to POST some content to > a website. Without crsf_token, the bot will get a 403, and I would > prefer not to remove this behavior but rather find a way to make the >

Re: Advice: project hosting apps

There is also http://gitorious.org/ - it is ROR, but it is agpl. -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com. To unsubscribe from this group, send email to

Re: Logging raw sql

5.1 and am just executing a query against that to filter the results. On Mar 9, 4:35 am, krzysiekpl <krzysie...@gmail.com> wrote: > Hi, if you are using postgresql you can use logger_collector. Try > this:http://www.postgresql.org/docs/8.3/static/runtime-config-logging.html. > > On

Logging raw sql

I need to log all insert/update/delete queries such that the database could be rebuilt from the log. I know I can do this at the database level, but I need to log selectively for certain models. The statements captured from db.connection.queries still contain parameters so they won't work. Does

Re: Cool and useful development commands :-)

On 24 February 2011 00:29, Simone Federici wrote: > Maybe you could write a filter "urlsafe" to use into templates so that > variable does not contains javascript. > And you could create a command that scan templates and raise an alert every > variable inside an href

Re: Just going to point this out ...

It would be interesting to perhaps extend something like django-lint to pick up on what could be mistakes in templates. -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com. To

Re: Just going to point this out ...

> > is this what you're looking for? > > http://www.owasp.org/index.php/OWASP_Application_Security_FAQ > > Mike Hi Mike. Well in this case the page would be http://www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet but yes that link is a good starting point. I should

Re: Just going to point this out ...

> Which of course it can't - it is properly escaped. > > Cheers > > Tom > Yes. -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com. To unsubscribe from this group, send email to

Re: Just going to point this out ...

On 19 February 2011 01:36, Masklinn <maskl...@masklinn.net> wrote: > On 2011-02-18, at 15:31 , dave b wrote: >> On 19 February 2011 01:29, Shawn Milochik <sh...@milochik.com> wrote: >>> By the way -- I realized what happened. You CC'd me on the e-mail to the >&

Re: Just going to point this out ...

On 19 February 2011 01:29, Shawn Milochik wrote: > By the way -- I realized what happened. You CC'd me on the e-mail to the > list. So when I replied it went directly to you. Ah sorry about the mix up then! Yeah :P My view on this is that documentation can always be

Re: Just going to point this out ...

On 19 February 2011 01:19, Shawn Milochik wrote: > Don't take my comment as a personal attack. I was just pointing out that > injection attacks are one of those things we're all responsible for being > aware of and not opening ourselves up to. > > To the extent that Django

Re: Just going to point this out ...

On 19 February 2011 00:57, Shawn Milochik wrote: > I also didn't see the part where they state that you shouldn't put your > database login information in a template. That's probably because Django is > designed to allow Web developers to do their jobs more easily, not allow

Just going to point this out ...

Hi I cannot see where in the django documentation it states that you shouldn't do something like this: ** (as an example of a potential attribute injection vector[0] - where you are not using a URLField or failure to call full_clean (on a URLField) ). That is I cannot see where django states

Re: South - when to start?

On 18 February 2011 21:24, Piotr Zalewa wrote: > Where is the best moment to start with south? > > 1. The very beginning, as the first app added to the project? > 2. At the moment when more devs will be involved? > 3. When real data will start to show? > now! (just start using

Re: Change CSS file in base template depending on browser

+1 for conditional comments. They're what all the cool kids are using these days. On 18 Jan 2011 15:00, "Michel Thadeu Sabchuk" wrote: > Hi, > >> I have 2 css files. One specifically for IE because it's so horrible. >> I'd like to load either or css files depending on the

Re: Djangoweek.ly, a Django weekly newsletter

January. Hopefully this will be of interest to some > of the members of this list. > http://djangoweek.ly/ All signed up. Looking forward to it :) -- --- Dave Sayer | Bath Design Web design & development with standards --- mobile

Re: Serialize Data for JSON output

how to access specific data in the array. I'll have a hunt around on google. I think this is now a bit off topic for the Django list. Thanks for your help. Dave On 20 December 2010 16:42, Nick <nickt...@gmail.com> wrote: > This sounds like it is an issue with your JS for your

Serialize Data for JSON output

', 'title', 'caption', 'tags', 'title_slug', 'date_taken')) Where I am now stuck, is how to use this as JSON in my script. I have read that deserialize is the way to do it but I can't get my head around what comes after deserialize. Any pointers would be much appreciated. Cheers, Dave

Re: Just saying hi

Thanks for the welcomes. Hope I can contribute to, as well as benefit from the list. On 19 December 2010 18:43, Cal Leeming [Simplicity Media Ltd] <cal.leem...@simplicitymedialtd.co.uk> wrote: > Glad to see another Django developer has joined us :) > > On Sun, Dec 19, 2010 at 12:16

Just saying hi

ough it's been a pretty steep learning curve but I seem to be getting there. Anyway, hello and I look forward to being part of the community. Cheers, Dave -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, sen

Local testing setup with Python 2.7 OS X installer, mod_wsgi and Apache?

with Python 2.7 and restore 64 bit Apache2. I originally posted this on StackOverflow but had no response, so hopefully someone on this list has been there first: http://stackoverflow.com/questions/4028394/python-2-7-os-x-installer-mod-wsgi-and-apache Dave Everitt -- You received this message

upload_to vs FileSystemStorage

Hi everyone, I've found in documentation usage of custom file storage. There it is like that ( http://docs.djangoproject.com/en/1.2/topics/files/#the-built-in-filesystem-storage-class ) - from django.db import models from django.core.files.storage import FileSystemStorage fs =

File storage

Hello, I am doing a project in djagno and I stucked in working with files. I am realy confused about, how it is described in django documentation and I did not find a solution in it that would suit my case. So basically what I want to do - I want to have a storage for some certain files in my

Re: potential issue re in memory django file uploading.

Ok no movement :) Lighttpd has a default limit of 2gb, cherokee seems to have the same. Pin it on the httpd all you like - but the default apache has no limit (0 - unlimited :) ). http://httpd.apache.org/docs/2.0/mod/core.html#limitrequestbody -- The better part of valor is discretion.

Re: potential issue re in memory django file uploading.

> His response is to say he will escalate this to some other security > forum. We can only assume that this is a threat that he will raise > merry hell until we do what he says. Right first: Yes I am sorry for the 9 or so posts :) I am only human. Right. Um no that's not a threat. That's being

Re: potential issue re in memory django file uploading.

On 31 August 2010 12:04, Russell Keith-Magee <russ...@keith-magee.com> wrote: >> On 8/30/2010 9:09 PM, dave b wrote: >>> Do not pass go do not collect profit! > ... >>> Put your hands up in the air like you just don't care! > ... >>> blahblahblalbha sss

Re: potential issue re in memory django file uploading.

> And, for the record, the fact that Ubuntu or Debian have chosen these > defaults doesn't make Apache insecure either. System defaults exist to > make it easy and obvious to get something started. A responsible > sysadmin for a public-facing webserver shouldn't be using *any* > OS-provided

Re: potential issue re in memory django file uploading.

> > From my testing (granted this was run against something pre-1.2 so things > may have changed since then), as soon as you initiate the first file upload, > you're monopolizing the devserver process, preventing further attempts to do > the following 9 uploads until the first has completed

Re: potential issue re in memory django file uploading.

>> Secure by default please! > > That's an easy epithet to throw around, but I disagree that it is > appropriate here. "Security" doesn't mean "stops the user from making > mistakes". Look like wsgi, apache2 and django all on ubuntu PLACE no size limits at all by default. Isn't that neat? I think

Re: potential issue re in memory django file uploading.

/me rolls eyes. You have a valid point re /tmp, sorry I am used to mounting /tmp as /tmpfs - my mistake :) Ok lets be *really* clear the security problem still exists. An attack can in the limits set on the maximum post by the httpd / module in use upload a large file. > I don't actually use

Re: potential issue re in memory django file uploading.

On 30 August 2010 11:04, Russell Keith-Magee <russ...@keith-magee.com> wrote: > On Sun, Aug 29, 2010 at 8:26 PM, dave b <db.pub.m...@gmail.com> wrote: >  1) An actual problem where you can clearly describe the circumstances > or sequence of events that would allow an atta

Re: potential issue re in memory django file uploading.

> Anyway, since you have done your civic duty there's a good chance that a > fix will find its way into some future version. Thanks for being a good > citizen. Django is an awesome project and. However, a bug is a bug. I don't care if it is a security bug or not, a bug *should* get fixed. FYI: I

Re: potential issue re in memory django file uploading.

> An attacker could also assemble a powerful explosive device and detonate > it near enough your hosting service to take your site down. What > counter-measures are you going to take against that? Good question. I have two cats and they like to lick people ^^ They are a bit friendly I guess. Do

Re: potential issue re in memory django file uploading.

> OK, so you don't believe the advice you are getting, which is that of > the many issues a Django sit will face this is a relatively low > probability attack. That's fair enough - a vulnerability is a > vulnerability, after all, no matter how improbable, and not everyone > will set up their

  1   2   3   >