#7060: Tutorial skips over a race condition
-------------------------------+------------------------------------
     Reporter:  donald.ball@…  |                    Owner:  nobody
         Type:  Uncategorized  |                   Status:  new
    Component:  Documentation  |                  Version:  master
     Severity:  Normal         |               Resolution:
     Keywords:                 |             Triage Stage:  Accepted
    Has patch:  0              |      Needs documentation:  0
  Needs tests:  0              |  Patch needs improvement:  0
Easy pickings:  0              |                    UI/UX:  0
-------------------------------+------------------------------------
Changes (by garrison):

 * status:  closed => new
 * severity:   => Normal
 * resolution:  invalid =>
 * easy:   => 0
 * ui_ux:   => 0
 * type:   => Uncategorized


Comment:

 I am re-opening this, as I think the decision here ought to be revisited.
 It reflects poorly on Django for the tutorial to teach poor coding
 practices, particularly when there is a race condition in a vote-tallying
 app.  More and more, such race conditions are being treated as true
 security vulnerabilities.

 Following
 
[http://www.reddit.com/r/programming/comments/33zg4u/race_conditions_on_facebook_digitalocean_and/cqpxnpp
 discussion on reddit], I suggest putting a note in the tutorial mentioning
 that the code indeed has a race condition, and that more advanced users
 should consider Django's F-expressions instead.

--
Ticket URL: <https://code.djangoproject.com/ticket/7060#comment:7>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/079.cfe555443ba2c913e6e21ba80cd3bc55%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to