Hi,

> On Wednesday, 3 September 2014 9:52 PM, Amit Tripathi wrote:
> the my code https://github.com/amitt001/fsse

> Please someone tell me where I am doing it wrong and what else is required?


1. Hard coding local file paths '/home/amitt001/mycodes/dgplug/...' is wrong. 
When you deploy your web app on another machine, it won't work, because the 
path won't exist on that machine.
=> Such parameters should go into a configuration file.


2. Temporary file creation in search.py is not secure.
=> see -> 
https://kurt.seifried.org/2012/03/14/creating-temporary-files-securely/



Hope it helps.
---
Regards
   -Prasad
http://feedmug.com
_______________________________________________
Users mailing list
[email protected]
http://lists.dgplug.org/listinfo.cgi/users-dgplug.org

Reply via email to