Re: Suggestion: "django-admin startproject" should not put secrets in settings.py

2020-07-27 Thread Jure Erznožnik
+1 on this approach. No problems with external storage mechanisms where the newbie then needs to do something to provide the required data. It's all done neatly in Python, but secrets themselves are conveniently placed in a different file. LP, Jure On 26/07/2020 15:09, Roy Smith wrote: In th

Re: Ticket #21289 - Login rate limiting

2020-07-27 Thread Aymeric Augustin
Hello, Having some basic throttling built-in would be an improvement for the vast majority of websites. Also it would plug one of the big holes in django.contrib.auth (another big one being 2FA). Some DoS concerns were expressed on the pull request. I believe the options are: 1. use a global f

Re: Ticket #21289 - Login rate limiting

2020-07-27 Thread Claude Paroz
Hi Adam, Le lundi 27 juillet 2020 16:55:35 UTC+2, Adam Johnson a écrit : > Hi Claude, > > A delay of 5 seconds seems quite long. Often I fail to log into a site due > to mis-selection of credentials from my password manager, so I can resubmit > a login form within 1-2 seconds. > That 5-secs ch

Re: Query Optimization (Huge Data in the Database)

2020-07-27 Thread Adam Johnson
Hi! I think you've found the wrong mailing list for this post. This mailing list is for discussing the development of Django itself, not for support using Django. This means the discussions of bugs and features in Django itself, rather than in your code using it. People on this list are unlikely t

Re: Query Optimization (Huge Data in the Database)

2020-07-27 Thread Ethem Güner
If It is not need to be always updated, use caching. Sci Mithilesh , 26 Tem 2020 Paz, 19:00 tarihinde şunu yazdı: > call or replay me I am interested +918709440658 > > On Sun, 19 Jul 2020, 9:11 am karthik challa, > wrote: > >> Hi Experts, >> >> I am trying to execute a Django query (ORM) but my

Re: Query Optimization (Huge Data in the Database)

2020-07-27 Thread Ethem Güner
If It is not need to be always updated, use caching. Sci Mithilesh , 26 Tem 2020 Paz, 19:00 tarihinde şunu yazdı: > call or replay me I am interested +918709440658 > > On Sun, 19 Jul 2020, 9:11 am karthik challa, > wrote: > >> Hi Experts, >> >> I am trying to execute a Django query (ORM) but my

Re: Ticket #21289 - Login rate limiting

2020-07-27 Thread Adam Johnson
Hi Claude, A delay of 5 seconds seems quite long. Often I fail to log into a site due to mis-selection of credentials from my password manager, so I can resubmit a login form within 1-2 seconds. A real rate-limiting solution has the advantage of buckets of requests per time period, allowing users

Ticket #21289 - Login rate limiting

2020-07-27 Thread Claude Paroz
Hi all, I thought a bit about login rate limiting again in recent times. https://code.djangoproject.com/ticket/21289 We know that there are some packages (django-ratelimit, django-defender, etc.) that can do the job, but the main issue here is to provide a *default* behavior for any fresh new Dja