Template Renderer safe if used with URL parameters?

2011-12-08 Thread Matthew Roy
I'm presently using a URL parameter to allow requests to specify a particular template they want the results to be returned in, allowing AJAX requests to get results in a particular format for inclusion in different pages without any code duplication. Is this actually safe? Is the input taken by r

Re: Re: Multiple Servers and Authentication Sessions Breaking

2011-03-09 Thread Matthew Roy
@Tom: I'm not configuring SESSION_ENGINE so it should be the default django.contrib.sessions.backends.db @Henrik: That may well be the problem, I have a cron job to generate a random secret key on each server weekly. I will try setting them statically. Thanks for your responses, I'll let you know

Multiple Servers and Authentication Sessions Breaking

2011-03-09 Thread Matthew Roy
I'm running a site with 2 front end servers (lighttpd with django in fcgi daemons) and one database server (MySQL). The two front end servers are in DNS round-robin so a user might get some content from one and some from the other in any given session. All this works fine and has had no problems fo