Hi Allen, On Mon, Aug 24, 2009 at 2:36 AM, Allen <allen.lu...@gmail.com> wrote:
> > As we know we can use "http://localhost/_ah/admin"; to go through the > local database before upload to GAE. And we can not directly use > "http://www.mydomain.com/_ah/admin"; to visit the online database after > "appcfg.py" to GAE. > > My question is: > > how can I achieve the same as online database? How to limit the local > "_ah/admin"? > > When I developing local webserver, I don't wanna everyone can visit > database directly by "_ah/admin" You shouldn't be using the dev_appserver anywhere that untrusted users can access it. Also, by default the dev_appserver is only accessible from the machine it's running on - it's not possible to make requests to it from another machine. -Nick Johnson > > > Thanks a lot!!! > > > -- Nick Johnson, Developer Programs Engineer, App Engine --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en -~----------~----~----~----~------~----~------~--~---
