craic wrote:
> with django, is it possible to restrict the calling host of particular
> urls to be the localhost?
>
> namely, is there a way to restrict say a set of web services
> implemented in django to be only accepted if they are the same domain
> as the hosted page?
>
> so if i have a php page on foo.com/bar.php, which contains javascript
> with some ajax calls to a web service: http://foo.com/ws/blah, that
> would be allowed.
>
> but if someone on another host/location atttemps to call: 
> http://foo.com/ws/blah
> they will get permission denied.
>
> tnks,
> g'craic
>   
I'm not a Django expert, but it strikes me that this is something that 
would be better controlled at the web server configuration layer. In 
apache, for instance, I can restrict access like this quite easily with 
some simple allow/deny directives.

StanD.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to