Yeah, it looks like it is the generic.html file. Probably this loophole 
should be closed by default. Perhaps it could check if it's on localhost or 
something.

I was just returning someone's first name but the record included all 
auth_user fields.

Reply via email to