From e4c8a248557509b4b2f1e38500f7e621e45b2742 Mon Sep 17 00:00:00 2001 From: Fred Pauchet Date: Wed, 11 May 2016 15:37:26 +0200 Subject: [PATCH] django-admin-honeypot --- source/admin/annex.rst | 21 +++++++++++++++++++++ source/models/key-points.rst | 2 +- 2 files changed, 22 insertions(+), 1 deletion(-) create mode 100644 source/admin/annex.rst diff --git a/source/admin/annex.rst b/source/admin/annex.rst new file mode 100644 index 0000000..eee0f76 --- /dev/null +++ b/source/admin/annex.rst @@ -0,0 +1,21 @@ +******* +Annexes +******* + +Django-Admin-honeypot +===================== + +`django-admin-honeypot `_ is a fake Django admin login screen to log and notify admins of attempted unauthorized access. This app was inspired by discussion in and around Paul McMillan’s security talk at DjangoCon 2011. Cette librairie est surtout utile si elle est couplée avec les *loggers*: + +.. code-block:: python + + # Taken directly from core Django code. + # Used here to illustrate an example only, so don't + # copy this into your project. + logger.warning("Forbidden (%s): %s", + REASON_NO_CSRF_COOKIE, request.path, + extra={ + "status_code": 403, + "request": request, + } + ) diff --git a/source/models/key-points.rst b/source/models/key-points.rst index 0d968ab..772dfed 100644 --- a/source/models/key-points.rst +++ b/source/models/key-points.rst @@ -78,7 +78,7 @@ A partir de maintenant, on peut accéder à nos propriétés de la manière suiv .. code-block:: python - # $ python manage.py shell + # python manage.py shell >>> from wish.models import Wishlist, Item >>> w = Wishlist('Liste de test', 'description')