From 14b678f11135ab248c65e732782e1425f62dd845 Mon Sep 17 00:00:00 2001 From: Tomas Gavenciak Date: Thu, 14 May 2015 02:46:15 +0200 Subject: [PATCH] Vetsi bezpecnost tajneho session key --- mamweb/settings_common.py | 2 +- mamweb/settings_prod.py | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/mamweb/settings_common.py b/mamweb/settings_common.py index 0c5f93fd..e4c1db5a 100644 --- a/mamweb/settings_common.py +++ b/mamweb/settings_common.py @@ -155,7 +155,7 @@ try: with open(os.path.join(os.path.dirname(__file__), '..', 'django.secret')) as f: SECRET_KEY = f.readline().strip() except: - SECRET_KEY = ')^u=i65*zmr_k53a*@f4q_+ji^o@!pgpef*5&8c7zzdqwkdlkj' + SECRET_KEY = '12345zmr_k53a*@f4q_+ji^o@!pgpef*5&8c7zzdqwkdlkj' # MaM specific diff --git a/mamweb/settings_prod.py b/mamweb/settings_prod.py index b2d0506c..9a93aa8a 100644 --- a/mamweb/settings_prod.py +++ b/mamweb/settings_prod.py @@ -8,14 +8,14 @@ INSTALLED_APPS += ( ) # SECURITY WARNING: keep the secret key used in production secret! -#SECRET_KEY = TODO +assert not SECRET_KEY.startswith('12345') # SECURITY WARNING: don't run with debug turned on in production! DEBUG = False TEMPLATE_DEBUG = False -ALLOWED_HOSTS = ['mam.mff.cuni.cz'] +ALLOWED_HOSTS = ['mam.mff.cuni.cz', 'www.mam.mff.cuni.cz', 'atrey.karlin.mff.cuni.cz'] # Database # https://docs.djangoproject.com/en/1.7/ref/settings/#databases