diff --git a/AUTHORS b/AUTHORS index 35ad3b7ef3..d78dabbb4b 100644 --- a/AUTHORS +++ b/AUTHORS @@ -235,6 +235,7 @@ answer newbie questions, and generally made Django that much better: Joe Topjian torne-django@wolfpuppy.org.uk Karen Tracey + tstromberg@google.com Makoto Tsuyuki tt@gurgle.no Amit Upadhyay diff --git a/django/core/management.py b/django/core/management.py index 816b51352e..e617bd2136 100644 --- a/django/core/management.py +++ b/django/core/management.py @@ -832,9 +832,15 @@ def startproject(project_name, directory): sys.stderr.write(style.ERROR("Error: '%r' conflicts with the name of an existing Python module and cannot be used as a project name. Please try another name.\n" % project_name)) sys.exit(1) _start_helper('project', project_name, directory) + # Create a random SECRET_KEY hash, and put it in the main settings. main_settings_file = os.path.join(directory, project_name, 'settings.py') settings_contents = open(main_settings_file, 'r').read() + + # If settings.py was copied from a read-only source, make it writeable. + if not os.access(main_settings_file, os.W_OK): + os.chmod(main_settings_file, 0600) + fp = open(main_settings_file, 'w') secret_key = ''.join([choice('abcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*(-_=+)') for i in range(50)]) settings_contents = re.sub(r"(?<=SECRET_KEY = ')'", secret_key + "'", settings_contents)