Code

Changes between Version 14 and Version 15 of django_apache_and_mod_wsgi


Ignore:
Timestamp:
03/31/09 17:42:32 (5 years ago)
Author:
grahamd
Comment:

Add warning about where settings file located until this example is fixed properly.

Legend:

Unmodified
Added
Removed
Modified
  • django_apache_and_mod_wsgi

    v14 v15  
    4949Include "<PATH TO YOUR DJANGO PROJECT>/apache/apache_django_wsgi.conf" 
    5050}}} 
     51 
     52'''NOTE: Putting settings file in the 'apache' subdirectory where the WSGI script file is located is technically a security risk. This is because in order for the WSGI script file to be served from there, you have had to configure Apache to tell it it can use that directory. In doing that, it can technically serve files from there as static files. Thus, if Apache was incorrectly configured and files in that directory made accessible via a URL as static files, it would be possible to download the settings file. Since the settings file can contain database passwords, that obviously isn't going to be a good thing to happen. This example really should be modified, with settings files located one directory up from where they are, as would normally be the case.''' 
    5153 
    5254This suppose that you have created a folder named {{{apache}}} in your django project in this folder your should add the following files: