mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-07-07 19:29:12 +00:00
Code Issues 32 Releases Wiki Activity

[4.0.x] Avoided suggestion of plain text database password in sessions topic.

Browse Source 
Backport of ccafad2e429468c518c80fb178f9e7a3f06e78e1 from main
This commit is contained in:
Luke Plant 2022-01-04 05:47:24 +00:00 committed by Mariusz Felisiak
parent fe59bf202d
commit 7753169585
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/topics/http/sessions.txt
View File

@ -417,7 +417,7 @@ This simplistic view logs in a "member" of the site::
def login(request): def login(request):
m = Member.objects.get(username=request.POST['username']) m = Member.objects.get(username=request.POST['username'])
if m.password == request.POST['password']: if m.check_password(request.POST['password']):
request.session['member_id'] = m.id request.session['member_id'] = m.id
return HttpResponse("You're logged in.") return HttpResponse("You're logged in.")
else: else: