Re: [web2py] Re: remote admin

2013-05-22 Thread Wei Li
This setup-web2py-ubuntu.sh looks very helpful to me! Thanks. On Wed, May 22, 2013 at 6:47 PM, Anthony wrote: > Also, the setup scripts include code to create self-signed SSL > certificates -- for example: > https://code.google.com/p/web2py/source/browse/scripts/setup-web2py-ubuntu.sh#74. > You

Re: [web2py] Re: remote admin

2013-05-22 Thread Wei Li
Thanks for the detail explanation! I think I am going to use ssh tunnel to localhost now. On Wed, May 22, 2013 at 6:32 PM, Massimo Di Pierro < massimo.dipie...@gmail.com> wrote: > There are good reasons to be so secure. Without ssl, anybody on any of the > networks you are on can monitor your tr

[web2py] Re: remote admin

2013-05-22 Thread Anthony
Also, the setup scripts include code to create self-signed SSL certificates -- for example: https://code.google.com/p/web2py/source/browse/scripts/setup-web2py-ubuntu.sh#74. Your browser will give you a warning, but it will allow you to have access to admin. Anthony On Wednesday, May 22, 201

[web2py] Re: remote admin

2013-05-22 Thread Massimo Di Pierro
There are good reasons to be so secure. Without ssl, anybody on any of the networks you are on can monitor your traffic and steal your password or your session cookies. It is very easy to do. There are programs called wireshark and tcpdump to do it. If the have your admin password they can run

[web2py] Re: Remote admin of sqlite - through ssh

2012-06-10 Thread Anthony
Were you doing the inserts via a web2py shell? If so, you need to call db.commit() for the changes to be committed (db.commit() is allowed but not necessary in regular web2py application code because each request is automatically wrapped in a db transaction and committed at the end of the reque

[web2py] Re: Remote admin of sqlite - through ssh

2012-06-10 Thread nick name
On Sunday, June 10, 2012 6:18:26 AM UTC-4, wdtatenh wrote: > > Unfortunately, the update didn't occur (was not a schema change) - simple > insert to auth_membership table. Could see change when using local > cmd/python shell. Wasn't visible when I check using appadamin. > > sqlite is fine in

[web2py] Re: Remote admin of sqlite - through ssh

2012-06-10 Thread wdtatenh
Unfortunately, the update didn't occur (was not a schema change) - simple insert to auth_membership table. Could see change when using local cmd/python shell. Wasn't visible when I check using appadamin. sqlite is fine in this case because the site is not a high traffic site and very low co

[web2py] Re: remote admin access errors

2010-10-23 Thread Triquetra
Thank you, that worked. I also had to create a symbolic link (parameters_443.py) pointing to the password file (parameters_8000.py) in order to get rid of the "unable to access password file" error. On Oct 23, 12:44 pm, "Roberto De Ioris" wrote: > > Thank you for the quick reply. > > > I'm not s

Re: [web2py] Re: remote admin access errors

2010-10-23 Thread Roberto De Ioris
> Thank you for the quick reply. > > I'm not sure how to check whether uwsgi is setting the > wsgi_url_scheme. A quick search of this group and the uwsgi wiki > provided no direction. How can I check this? There are two (very old) threads on the official uWSGI list about https and scheme. uWSG

[web2py] Re: remote admin access errors

2010-10-23 Thread Triquetra
Thank you for the quick reply. I'm not sure how to check whether uwsgi is setting the wsgi_url_scheme. A quick search of this group and the uwsgi wiki provided no direction. How can I check this? On Oct 22, 11:36 pm, mdipierro wrote: > Look into admin/models/access.py > > This is how web2[y ch

[web2py] Re: remote admin access errors

2010-10-22 Thread mdipierro
Look into admin/models/access.py This is how web2[y checks if request.env.http_x_forwarded_for \ or request.env.wsgi_url_scheme in ['https', 'HTTPS'] \ or request.env.https == 'on': session.secure() elif not remote_addr in hosts and not DEMO_MODE: raise HTTP(200, T('Admin