Re: Need help with Authenticating and Authorizing

1. Have you tried to check from the django admin end, the user is not saved? 

2. If the user is saved, did you create a hashed password before saving data in your views? 

On Fri, 10 Mar 2023 at 21:15, linda jean-philippe <jeanphilippe.linda@gmail.com> wrote:

I created 2 accounts with the django admin page, but the credentials do not work on the login page. When I create new credentials with the register page I made, it doesn't save. I think it's supposed to save to the database.

On Mar 10, 2023, at 1:06 PM, Namanya Daniel <dnamanya.daniel@gmail.com> wrote:



how have you saved your password in registration? 

On Fri, 10 Mar 2023 at 18:02, linda jean-philippe <jeanphilippe.linda@gmail.com> wrote:

I do not know what I am missing. My login page and register page have rendered, but when I try to sign up with new credentials, it does not save. And on the Django Admin page, it says invalid password and username with each attempt.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/b9c56cc4-6ab6-4f2b-81f0-48e256ff3685n%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CAP4VW2X_K03C1ZoZZoCVfCbRBia5SX6OqsPygMixPReHWXe75Q%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/C005769D-7154-43A2-9D0E-A9A53A62148F%40gmail.com.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CAP4VW2XfYKiajXg5GYbEs75BRDLa5aD1%2Bbiii__YnWHT0YyE8w%40mail.gmail.com.

Re: Need help with Authenticating and Authorizing

I created 2 accounts with the django admin page, but the credentials do not work on the login page. When I create new credentials with the register page I made, it doesn't save. I think it's supposed to save to the database.

On Mar 10, 2023, at 1:06 PM, Namanya Daniel <dnamanya.daniel@gmail.com> wrote:



how have you saved your password in registration? 

On Fri, 10 Mar 2023 at 18:02, linda jean-philippe <jeanphilippe.linda@gmail.com> wrote:

I do not know what I am missing. My login page and register page have rendered, but when I try to sign up with new credentials, it does not save. And on the Django Admin page, it says invalid password and username with each attempt.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/b9c56cc4-6ab6-4f2b-81f0-48e256ff3685n%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CAP4VW2X_K03C1ZoZZoCVfCbRBia5SX6OqsPygMixPReHWXe75Q%40mail.gmail.com.

Re: Need help with Authenticating and Authorizing

how have you saved your password in registration? 

On Fri, 10 Mar 2023 at 18:02, linda jean-philippe <jeanphilippe.linda@gmail.com> wrote:

I do not know what I am missing. My login page and register page have rendered, but when I try to sign up with new credentials, it does not save. And on the Django Admin page, it says invalid password and username with each attempt.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/b9c56cc4-6ab6-4f2b-81f0-48e256ff3685n%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CAP4VW2X_K03C1ZoZZoCVfCbRBia5SX6OqsPygMixPReHWXe75Q%40mail.gmail.com.

Re: [How to enter the virtual environment created by Django Web Project in VS2019]

Try running 👇 inside the env folder.

.\Scripts\activate 

शुक्र, १०, मार्च २०२३, ८:३२ म.उ. ला 徐捷耀 ने <yhocotw31016@gmail.com> लिहीला:

Hello, I am Jiao.

 
I would want to know how enter the virtual environment created by "Django Web Project" in Visual Studio.

WHAT I DID?
I enter the file path  "~MyProjectname\env\Scripts" and type "activate", but nothing happen. Thanks for help!

Jiao

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/0432becc-afd7-43f1-933c-ec51515eaa22n%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CAJY8mfzsE%3DknmY3LfnUtTXAq-0NxwNA5PsG4ndOe74iOOzfd4A%40mail.gmail.com.

Re: Django v3.2 broken admin interface due to malicious JSON value

Thanks for the hint. I indeed used the fuzzer a while ago with an older Python version. I just tried to save this kind of string and I now receive the same `ValueError` when the malicious string would get saved to the DB.

On Wednesday, 8 March 2023 at 01:06:41 UTC+1 Mike Dewhirst wrote:

On 8/03/2023 7:49 am, hi via Django users wrote:

Hello everybody,

I've used a fuzzer on my Django v3.2 project that resulted in a broken admin interface. I'm not sure whether this is a bug or a rough edge case.

I'm using Python 3.9.13 with Django 3.2.18 with Postgres.

I have a Model with a JSONField and also added the model to my admin view (I don't use the JSON field on the list view / filter)

```
    data = models.JSONField(null=True, blank=True)
```

The fuzzer added (via an API view) a string with 10,000 characters to the data field. 

Every time I want to open the admin list view (and the malicious object is part of the page), my Django crashes with the following message:

It appears the fix introduced the ValueError in the following version to the one you are using hence fuzzing is probably finding a different problem.

Everything I have read in Django docs about collecting external input warns against letting stuff in unfiltered.

Perhaps you do have to prevent malicious strings. I think I would.

> ValueError
> 
> Exceeds the limit (4300) for integer string conversion: value has 10000 digits; use sys.set_int_max_str_digits() to increase the limit

I have attached my Sentry stack trace as a screenshot.

If this is an intended behavior, I have to validate the data to prevent malicious strings. But it feels like the admin interface should be able to handle those JSON values.

It looks like the Python releases in Sep 2022 have to do with this bug/edge case: https://mail.python.org/archives/list/pytho...@python.org/message/B25APD6FF27NJWKTEGAFRUDNSVVAFIHQ/

Kind Regards,

Johannes

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/6172A96F-F5FD-4694-9597-DFA815297945%40jfilter.de.

--   Signed email is an absolute defence against phishing. This email has  been signed with my private key. If you import my public key you can  automatically decrypt my signature and be sure it came from me. Your  email software can handle signing.  

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/474230e5-ad03-4704-b15d-1b231d549945n%40googlegroups.com.

Need help with Authenticating and Authorizing

I do not know what I am missing. My login page and register page have rendered, but when I try to sign up with new credentials, it does not save. And on the Django Admin page, it says invalid password and username with each attempt.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/b9c56cc4-6ab6-4f2b-81f0-48e256ff3685n%40googlegroups.com.

[How to enter the virtual environment created by Django Web Project in VS2019]

Hello, I am Jiao.

 
I would want to know how enter the virtual environment created by "Django Web Project" in Visual Studio.

WHAT I DID?
I enter the file path  "~MyProjectname\env\Scripts" and type "activate", but nothing happen. Thanks for help!

Jiao

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/0432becc-afd7-43f1-933c-ec51515eaa22n%40googlegroups.com.