#7060: Tutorial skips over a race condition
-------------------------------+------------------------------------
     Reporter:  donald.ball@…  |                    Owner:  nobody
         Type:  Uncategorized  |                   Status:  new
    Component:  Documentation  |                  Version:  master
     Severity:  Normal         |               Resolution:
     Keywords:                 |             Triage Stage:  Accepted
    Has patch:  0              |      Needs documentation:  0
  Needs tests:  0              |  Patch needs improvement:  0
Easy pickings:  0              |                    UI/UX:  0
-------------------------------+------------------------------------
Changes (by garrison):

 * status:  closed => new
 * severity:   => Normal
 * resolution:  invalid =>
 * easy:   => 0
 * ui_ux:   => 0
 * type:   => Uncategorized


Comment:

 I am re-opening this, as I think the decision here ought to be revisited.
 It reflects poorly on Django for the tutorial to teach poor coding
 practices, particularly when there is a race condition in a vote-tallying
 app.  More and more, such race conditions are being treated as true
 security vulnerabilities.

 Following
 
[http://www.reddit.com/r/programming/comments/33zg4u/race_conditions_on_facebook_digitalocean_and/cqpxnpp
 discussion on reddit], I suggest putting a note in the tutorial mentioning
 that the code indeed has a race condition, and that more advanced users
 should consider Django's F-expressions instead.

--
Ticket URL: <https://code.djangoproject.com/ticket/7060#comment:7>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/079.cfe555443ba2c913e6e21ba80cd3bc55%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to