detecting stale session data

Hi, I'm pretty new to Django and am having a problem with a race conditions while modifying my session data. I'm using the standard session backend in Django 1.4.1,, backed by Mysql. I have view A, which can take a long time to process, and view B, which is usually faster. I store multiple

Re: Right way to modify contrib auth package?

I'm sure that this is all obvious to experienced Django developers, but I thought I'd document what I did for my fellow Django newbies. Again, thanks to Anton for his advice. > In my application directory, I subclassed PasswordChangeForm and SetPasswordForm. Then I added my custom validation

Re: Right way to modify contrib auth package?

Anton, Great -- this is exactly what I needed to know. Thanks for the guidance. Spork On Thursday, May 2, 2013 7:31:57 AM UTC-7, bak1an wrote: > > Hi. > > I think that subclassing PasswordChangeForm and doing password length > check in child's clean method is more "correct" way to do this. > >

Right way to modify contrib auth package?

Hi, I'm fairly new to Django, and would like to enforce a minimum password length for my site's users. I'm using James Bennett's registration package and have made the needed changes to forms.py. It works great. Now I'd like to apply the same password requirements when a user changes or

Re: Newbie CSRF protection questions

Russ, This is a really great explanation of CSRF vulnerabilities, and I think I have a handle on what I need to do now. Thanks for taking to time to spell things out for me. > > Best, Spork -- You received this message because you are subscribed to the Google Groups "Django users" group. To

Newbie CSRF protection questions

Hi, I'm fairly new to web development and Django, and I'm trying to make sure my application is protected against CSRF attacks. I've read through https://docs.djangoproject.com/en/dev/ref/contrib/csrf/, but I'm not confident I'm understanding it fully. I'd be very grateful for some

Re: Newbie question: session-length data storage best practices?

Nik, My concerns are about security. I have some sensitive data associated with each user's session, and I'd like to make sure it is deleted when the user logs out or their session times out or closes their browser window. There's also some other clean up actions I'd like to do under the same

Re: Newbie question: session-length data storage best practices?

Ok, you've made a very convincing argument. I really haven't spent much time thinking about scalability -- obviously it's time for me to do so! Thanks for taking the time to respond. Spork -- You received this message because you are subscribed to the Google Groups "Django users" group. To

Newbie question: session-length data storage best practices?

Hi, I've got some data that I'll need read/write access to for the length of an authenticated session's lifetime. But once that browser tab is closed or the user logs out or the user session times out, I want that data to disappear. If I'm reading the session docs correctly, if I add the data