Re: Why Syntax Errors in URLconf are Silent?

Hi, On Feb 7, 8:43 am, Kenneth Gonsalves wrote: > what type of syntax error? I put an extra comma in my urls file and the app > promptly crashed. > I wrote "pattenrs" instead of "patterns" and the sure did crash. But instead of crashing and reporting a Syntax Error exception it reported a fail

Why Syntax Errors in URLconf are Silent?

Hi, I've included a app specific URLconf in my main URLconf file. I had some syntax errors in the included URLconf file, however instead of throwing an exception about the syntax error, an exceptions was thrown when I've tried to use the "reverse()" function on the URLs of the included URLconf.

Re: Using hashing for password checking in auth module

Hi Kless, On Jan 31, 7:05 pm, Kless wrote: > > Your method has a point of failure. Whatever can see your code JS > (client-code), so he will know what are you making with the password > that is sent from a form. > > The best options are https or using HMAC-SHA1/RIPEMD160 > I've indeed referenc

Re: Using hashing for password checking in auth module

Hi Kless, Correct me if I'm wrong but bcrypt can be used as a solution for storing the passwords in the database (instead of the default sha1) but it doesn't provide the solution I'm looking for: not sending plain- text passwords in login forms. Anyway bcrypt sounds interesting, especially its ab

Re: Using hashing for password checking in auth module

Hi Matthias, On Jan 31, 12:37 am, Matthias Julius wrote: > > > But, it doesn't help you anything.  Someone who could get a hold of a > plain text password sent over the internet could get a hashed password > just as easily.  And the server has no way of telling whether the sent > password hash c

Re: Using hashing for password checking in auth module

Hi Martin, On Jan 30, 11:43 pm, Martin Conte Mac Donell wrote: > > Actually in contrib.auth passwords are stored in SHA1. If you mean > that passwords are sent in plain text "over the network" then you > should use https. > I meant "over the network". While https is the ideal solution security

Using hashing for password checking in auth module

o the current module/write a new authentication backend for it? Thanks, Guy Rutenberg --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@g