121 reputation
13
bio website
location
age
visits member for 1 year, 9 months
seen Mar 1 '13 at 4:17

Apr
20
awarded  Notable Question
Aug
28
awarded  Popular Question
Jan
15
awarded  Nice Question
Jan
10
comment Is Django's built-in security enough?
Yes I am not passing anything into extra(), all hard-coded, thanks for that. (SSL) Will do, thank you dr jimbob.
Jan
10
comment Is Django's built-in security enough?
D.W. mentioned about HTTP GET and not to have side effects. Thanks, this "..but even the best tool let's you still do stupid things." is a great eye opener.
Jan
10
comment Is Django's built-in security enough?
I forgot to mention that I will definitely be hooking up HTTPS prior to the site going live, but don't see the point during development. I was told it is an easy switch from standard HTTP.
Jan
10
comment Is Django's built-in security enough?
I have a question though, regarding the ORM layer. I lie within the Django ORM layer except for a couple of extra() calls. Am I still "safe" even with those extra() calls, if the input into extra() is not affected by the user (i.e. hard-coded stuff)?
Jan
10
comment Is Django's built-in security enough?
Thank you for this brilliant answer! You covered all three aspects I mentioned and more... thank you so much, exactly what I was after.
Jan
10
awarded  Student
Jan
10
asked Is Django's built-in security enough?