Collaborate Disseminate
The terminology has been a point of contention in the tech community for nearly two decades and now it was just removed from one of the most popular programming languages in the world. Continue reading ‘Master/Slave’ Terminology Was Removed from Python Programming Language
We have a production environment with MongoDB as backend. We are expecting to face nearly 300K users. It has to handle so many connections. We will have registration and login as well.
We are getting options to run the queri… Continue reading Is it safe to use Stored procedures over Django?
I just read this article about why JWT’s suck. I’m now uncertain what I should use for authentication.
For context: The API I wrote is mainly used by mobile Apps (iOS and Android). In the future it will also be accessed via … Continue reading Django Rest Framework: What should I use for authentication? How should I use it?
I want to encrypt the whole database so I’m using a Django router in which I’m encrypting and decrypting the database. Because of this my APIs are running slow. Can anyone suggest a better way or some alternatives?
Is it possible for someone to hack into my django admin app, if I do not create a user for it, by executing:
python manage.py createsuperuser
For example, is there a default username-password pair that someone could use to… Continue reading Is it secure not to set a user in django admin?
Using django, I get the following error showing up in my apache errorlog:
Invalid HTTP_HOST header: ‘kyortisdzheykob.ru’. You may need to add u’kyortisdzheykob.ru’ to ALLOWED_HOSTS.
But I do not have any mention of this ho… Continue reading Getting a suspicious error in apache error.log (DJANGO)
I know the SECRET_KEY for a website made in Django. The owner of the site has accidentally made the settings.py public.
What are the implications of making SECRET_KEY public? How can someone use this to attack the system?
… Continue reading What are the implications of making SECRET_KEY public?
I have implemented django-python3-ldap and integrated AD with my Django project. The project will be hosted on IIS as an intranet site that is served solely over http. I am deciding between using this solution or Django’s Rem… Continue reading django-python3-ldap Does TLS Encrypt AD Passwords When Site is Hosted on http
We were recently handed a security report containing the following:
Cookie(s) without HttpOnly flag set
vulnerability, which we apparently had in one of our internal applications.
The applied fix was as simple as setting Django’s CSRF_CO… Continue reading Does a CSRF cookie need to be HttpOnly?
I’m reading someone’s slides on bypassing WAFs.
&==; : Python Django between parameters;
FooBar==POST verb : Apache with PHP;
<%I%M%U011e>==<IMG> : IIS ASP Classic;
;/path1 ;foo/path2;bar/;==/path… Continue reading What does `&==;` mean with regard to Python Django and bypassing WAFs?