[web2py] Re: Admin security: https vs localhost

[cjrh]

That looks generally right, but you should invalidate the cache inside 
write_hosts_deny(), and I am fairly sure the *with* statement only arrived 
in 2.5.