Well, if you don't know you are secure, then you should have a security audit. If you don't know anyone who does security audits, can't do it yourself, and can't pay anyone to do it, then you will just have to settle for being insecure. If security is paramount then you'd likely want to get software which has already proven to be secure. There are many ways to do things wrong in web2py, but the documented ways are usually secure.
On Wednesday, November 13, 2013 12:04:57 PM UTC-7, sasogeek wrote: > > A friend wants me to build a loaning system applocation for him. This > raises a few flags considering that it deals with money and people's > personal information. But I'm particularly concerned about the security of > web2py... I want to be able to assure him that the system will be secure. I > have no experience with security or cryptography. Can I go ahead and tell > him that the system will be secure? Or there are some security measures I > can take... Like automatically encrypting data? -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issues) --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
