Hi,
Thanks for the suggestion Russell,
I never felt insecure when I dont use csrf. Since I hv disabled.
anyways, Thanks again.

*Laxmikant*



On Wed, Oct 3, 2012 at 4:41 AM, Russell Keith-Magee <russ...@keith-magee.com
> wrote:

> On Tue, Oct 2, 2012 at 1:36 PM, Laxmikant Gurnalkar
> <laxmikant.gurnal...@gmail.com> wrote:
> > Comment the csrf from settings.
>
> Please be *very* careful giving this advice. Advising someone to
> disable CSRF will almost universally be the wrong advice. By disabling
> CSRF, you're exposing your site to known and avoidable security
> problems.
>
> If you're getting CSRF errors, It's *much* better to try an understand
> what's going on and deal with the actual problem, rather than just
> making the problem "go away".
>
> Yours,
> Russ Magee %-)
>
> --
> You received this message because you are subscribed to the Google Groups
> "Django users" group.
> To post to this group, send email to django-users@googlegroups.com.
> To unsubscribe from this group, send email to
> django-users+unsubscr...@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/django-users?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com.
To unsubscribe from this group, send email to 
django-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en.

Reply via email to