Re: Homakov-esque Django Vulnerabilities

2012-03-06 Thread Masklinn
On 2012-03-07, at 07:53 , Peter Murphy wrote: > > > On Mar 7, 10:13 am, Donald Stufft wrote: >> >> For what it's worth in the context of the Homakov exploit, this has been a >> well known vulnerability by the rails core for years >> that they've basically said "not our problem, configure your

Re: Homakov-esque Django Vulnerabilities

2012-03-06 Thread Peter Murphy
On Mar 7, 10:13 am, Donald Stufft wrote: > > For what it's worth in the context of the Homakov exploit, this has been a > well known vulnerability by the rails core for years > that they've basically said "not our problem, configure your app better" the > entire time. I think that situation is

reading external urls file and building reverse pattern

2012-03-06 Thread Mo Mughrabi
Hi, Am stuck in building a function that would read from an external urlpattern and generate a url, I've written a question and posted it here http://stackoverflow.com/questions/9592332/django-read-urls-on-runtime-and-compile-reverse-output if anyone can help, i would appreciate it a lot -- You

Re: Homakov-esque Django Vulnerabilities

2012-03-06 Thread Donald Stufft
On Tuesday, March 6, 2012 at 7:11 PM, Russell Keith-Magee wrote: > > On 07/03/2012, at 7:55 AM, Joey Espinosa wrote: > > > I agree with you on some of your points. Security can be improved if people > > would email the support team INSTEAD OF filing a bug report (this goes for > > any project),

Re: Homakov-esque Django Vulnerabilities

2012-03-06 Thread Russell Keith-Magee
On 07/03/2012, at 7:55 AM, Joey Espinosa wrote: > I agree with you on some of your points. Security can be improved if people > would email the support team INSTEAD OF filing a bug report (this goes for > any project), so that the teams know about security bugs before anybody else > finds them

Re: django social auth

2012-03-06 Thread William Deegan
Suresh, On Mar 6, 2012, at 4:07 AM, suresh dokania wrote: > Hi, > I am using django social auth (facebook) for authentication and authorisation > It works fine online.ie the link they have given as demo in their site > http://social.matiasaguirre.net/ > d" > but when i download and build it , it

Re: Homakov-esque Django Vulnerabilities

2012-03-06 Thread Joey Espinosa
I agree with you on some of your points. Security can be improved if people would email the support team INSTEAD OF filing a bug report (this goes for any project), so that the teams know about security bugs before anybody else finds them. However, if there's a default setting or commonly set conf

Re: Homakov-esque Django Vulnerabilities

2012-03-06 Thread Russell Keith-Magee
On 06/03/2012, at 8:31 PM, Joey Espinosa wrote: > In light of all the recent talk about Egor Homakov's commandeering of GitHub > by exploiting a default Rails setting, are there any such "gotcha" security > defaults or common settings/conventions in Django you can think of that could > cause u

Re: sending django email via gmail

2012-03-06 Thread CLIFFORD ILKAY
On 03/06/2012 04:05 PM, Scott Macri wrote: I can run thunderbird on the same machine and don't have any issues. No, I am not running tbird at the same time as the django app. Thus, I know it's not a port conflict. It wouldn't make any difference if you were running your Django app and T'bird

Re: sending django email via gmail

2012-03-06 Thread Scott Macri
Got this resolved. The issue was that I needed to close my idle session and reopen it after changing my settings. On Tue, Mar 6, 2012 at 4:05 PM, Scott Macri wrote: > Here is my telnet response: > > Trying 74.125.45.109... > Connected to gmail-smtp-msa.l.google.com. > Escape character is '^]'. >

Re: Encrypting PK in URL

2012-03-06 Thread shiji bijo
today i asked my teacher to help me.she told it is possible to return as httpresponse(context) from the view then show the response body in the html page. I tried a lot but I didnt yet find a solution.I will try the one which you sent now the url I used now is ( r'^auctions/(\d+)/$',AuctionView())

Re: sending django email via gmail

2012-03-06 Thread Scott Macri
Here is my telnet response: Trying 74.125.45.109... Connected to gmail-smtp-msa.l.google.com. Escape character is '^]'. 220 mx.google.com ESMTP v26sm52104286yhk.1 I can run thunderbird on the same machine and don't have any issues. No, I am not running tbird at the same time as the django app. T

Encrypting PK in URL

2012-03-06 Thread nate
I saw a thread on this previously but it does not seem to have a solution. I used this thread http://stackoverflow.com/questions/2291176/django-python-and-link-encryption as a base and created encrypt and decrypt functions for the pk. I encrypt and quote and use smart_unicode to create my url

Re: serialization in Django

2012-03-06 Thread shiji bijo
ok I have removed the json.dumps() now the view is def do_GET(self, offset): data=get_object_or_404(NewAuction,pk=offset) context=serializers.serialize("json",[data]) return render_to_response("index.html",{"context":context}) and my index.html is {% extends 'base.html' %

Re: serialization in Django

2012-03-06 Thread Daniel Roseman
On Tuesday, 6 March 2012 19:14:55 UTC, angel wrote: > > I am new to django and doing my course project. I am searching for a > solution for iterating JSON dictionary in html page. My django view > is the following: > > def do_GET(self, offset): > data=get_object_or_404(NewAuction,pk=o

Re: serialization in Django

2012-03-06 Thread shiji bijo
thanks for the reply. In our course project it is a requirement to use serialised data for CRUD and display it on the html page.But we are not allowed to use the REST frameworks.I tried using return Httpresponse(serialiseddata). But i dont know where to write the javascript code On Tue, Mar 6, 201

Re: serialization in Django

2012-03-06 Thread Ilian Iliev
If you are returning json it seems more proper to me to parse it using JavaScript. Why exactly do you return json but not a normal dict/object? -- eng. Ilian Iliev Web Software Developer Mobile: +359 88 66 08 400 Website: http://ilian.i-n-i.org On Tue, Mar 6, 2012 at 9:14 PM, angel wrote: >

serialization in Django

2012-03-06 Thread angel
I am new to django and doing my course project. I am searching for a solution for iterating JSON dictionary in html page. My django view is the following: def do_GET(self, offset): data=get_object_or_404(NewAuction,pk=offset) context=serializers.serialize("json",[data]) d

Re: sending django email via gmail

2012-03-06 Thread nate
everything looks correct. I also use gmail and I have exactly what you have and it is working for me. The only difference I see is the order and I'm not sure if that makes a difference. My order is: EMAIL_USE_TLS EMAIL_HOST EMAIL_PORT EMAIL_HOST_USER EMAIL_HOST_PASSWORD Also are you using re

Re: sending django email via gmail

2012-03-06 Thread Tom Evans
On Tue, Mar 6, 2012 at 5:28 PM, Scott Macri wrote: > I'm attempting to send a message from my django app via gmail and keep > getting a connection refused error even though I know the parameters > are correct. > > settings.py > EMAIL_HOST = 'smtp.gmail.com' > EMAIL_PORT = '587' > EMAIL_USE_TLS = T

sending django email via gmail

2012-03-06 Thread Scott Macri
I'm attempting to send a message from my django app via gmail and keep getting a connection refused error even though I know the parameters are correct. settings.py EMAIL_HOST = 'smtp.gmail.com' EMAIL_PORT = '587' EMAIL_USE_TLS = True EMAIL_HOST_USER = 'myu...@gmail.com' EMAIL_HOST_PASSWORD = 'pas

Re:

2012-03-06 Thread suresh dokania
can u please let me know how to trick facebook ? its nt working . i ve posted d question in tat grp also as d number of volunteers are more in this grp,i m posting in this grp also please don mind On Tue, Mar 6, 2012 at 10:30 PM, Matías Aguirre wrote: > It can be used on your local server, but so

Re:

2012-03-06 Thread Matías Aguirre
It can be used on your local server, but some providers require a valid domain, facebook can be tricked, but google openid needs a valid domain and localhost won't work. BTW, django-social-auth questions can be discussed in here https://groups.google.com/group/django-social-auth Thanks, Matías E

[no subject]

2012-03-06 Thread suresh dokania
hi, a very basic question should the server be hosted on some place for django social auth to work or we can use it on our local server itself? please clarify my doubt -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, sen

Re: Reports

2012-03-06 Thread Derek
I am curious as to why/how you use a reporting tool that does not support HTML for a web application? (PS I note that this tool, as in the case of Geraldo, also uses ReportLab) On Mar 5, 5:29 pm, Alexey Luchko wrote: > Hi! > > We are usinghttp://PythonReports.sf.net/. > > -- > Regards, > Alex.

Fwd: help using django wsgi and apache

2012-03-06 Thread Emanuel Vitorino
Hello all I'm trying to install a virtual web server at my place to host two websites. I have installed apache and libapache2-mod-wsgi and it works fine. I have a dynamic IP and I'm using a no-ip account and I'm not being able to understand how to configure apache. I already read some tutorials

Re: Installing Django

2012-03-06 Thread James Bennett
On Tue, Mar 6, 2012 at 7:42 AM, Sophia wrote: > python setup.py install > > but it keeps giving me this error : > >   File "setup.py", line 70 >     if u'SVN' in version: >     ^ > SyntaxError: invalid syntax Most likely, you installed a 3.x version of Python. Django does not support Pyth

help using django wsgi and apache

2012-03-06 Thread Emanuel Vitorino
Hello all -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com. To unsubscribe from this group, send email to django-users+unsubscr...@googlegroups.com. For more options, visit this

Installing Django

2012-03-06 Thread Sophia
Hi all, I'm trying to install Django on my windows, I already install Python, as I read in Django tutorial for installing, I entered the path of the Django folder that I downloaded and unzipped, then for installing I entered the following command: python setup.py install but it keeps giving m

Re: User actions logging app

2012-03-06 Thread akaariai
On Wednesday, February 29, 2012 12:59:18 AM UTC+2, akaariai wrote: > Combined with database-level triggers you can get a good audit trail. > I have some scripts to ease maintain the DB triggers for PostgreSQL > when using Django. I hope I will have some time to polish them for > release, I beli

many to many key and model form

2012-03-06 Thread Miten
ModelForm / Forms talk about choice in case of many to many key fields. I need to actually show the many to many fields as text fields. My entity relationship is Birthday:ActionType with intermediary of Action. ActionType are basically notification type for sending birthday greetings like Phone,

many to many intermediary - template - model form

2012-03-06 Thread Miten
Hi, Below are my models, forms, views, template snippets. I am unable to code the django techniques well as I would like to use form to enable me do validation, POST extraction etc. It seems when using many to many key we cannot make good use of stuff. can one point me to good example which can

django social auth

2012-03-06 Thread suresh dokania
Hi, I am using django social auth (facebook) for authentication and authorisation It works fine online.ie the link they have given as demo in their site http://social.matiasaguirre.net/ d" but when i download and build it , it doesnt work i followed the docs given der ./manage.py syncdb works ./man

Cache for individualt request.user???

2012-03-06 Thread kase
i don't know if the cache work for views with the content dependent from user... example. @login_required def webapp(request): grupos = Grupo.objects.filter(usuarios = request.user).order_by('grupo') return render_to_response('accounting/webapp.html',{'grupos':grupos},RequestContext

Re: Haystack Solr Error

2012-03-06 Thread Sam Lai
On 5 March 2012 07:49, coded kid wrote: > I'm trying to rebuild_index, so after inputting manage.py rebuild- > index , I'm getting: > > Removing all documents in your index because you said so. > fail to clear Solr index: [Errno 10061] No connection could be made > because the target > machine act

Re: Exception handling in templates

2012-03-06 Thread bruno desthuilliers
On Mar 6, 7:07 am, Aryeh Leib Taurog wrote: > Let's say I have the following code: > > class MyClass: >     def my_title(self): >         if 'some string' not in self.get_another_object().x: >             return 'Specific Title' > > Then I have a template: > > {% with instance_of_myclass as obj %