Ranter
Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
Comments
-
@darksideplease it looks like that just does meetings, this does alot more and is easily expandable
-
Qchmqs5378yjust checking your code, dude you should escape your request.form inputs,
you're passing this shit as it is that just inputting ''' in both name and pass causes your server 500 -
@Qchmqs oh shit :O. I didn't notice that, obviously that should be email. Fixing and purging logs.
-
Qchmqs5378y@willbeddow
password = request.post['password']
#here you take an unsanitized post input, also still unhashed password
log.debug("here...etc").format(username,password)
#here you log the unhashed password variable
see the attached picture in my previous comment, or check the will.py script on the github repo -
@Qchmqs working on an https cert, got it from letsencrypt but having trouble applying it on the gevent webserver. Working on switching to nginx to implement it. That string should be email logged, fixing it now, thanks for letting me know.
Related Rants
!rant
type(rant) = shameless_self_promotion
I made an open source python personal assistant named W.I.L.L!
I made a reddit post about it here: https://reddit.com/r/Python/...
and you can use it for free at http://willbeddow.com
I've been working on it for a few years and it has a few hundred users.
Code: https://github.com/ironman5366/...
undefined
open source
personal assistant
release
python