Hi,
There seems to be a race condition in Django's model code for file
uploads. Here's the relevant code snippet (django/db/models/base.py
line 458 in the latest SVN version - #7520):
while os.path.exists(os.path.join(settings.MEDIA_ROOT,
filename)):
try:
dot_index = filename.rindex('.')
except ValueError: # filename has no dot
filename += '_'
else:
filename = filename[:dot_index] + '_' +
filename[dot_index:]
So the problem is that, if two instances of Django are trying to save
a file with the same name (even plus/minus a few trailing
underscores), one could end up overwriting the other one's file. The
event is highly unlikely, but that doesn't mean it's safe, imho. Or
I'm missing something obvious, maybe related to database transactions
providing some kind of locking?
Cheers,
-- Alex
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---
