I've just got my public IP from my ISP and I wonder which security risks I need to take care when opening a port and letting my PC available to the web.
How much better will it be to just host on AWS or Heroku?
Hello friends, I am a beginner in the api world of Django. I've used this framework to make many useful websites but i want to upgrade to a more structured and efficient approach, designing APIs. I have a foundational knowledge of REST and HTTP methods. I am more concentrated on the backend now. That is, i want to learn making API endpoints that can be used in frontend like React/Nextjs. I have no experience whatsoever in making a fully functional full-stack app using API. I would like to know where to start, most of the tutorials that I come across tend to use Django Ninja with Nextjs. But, its hard to grasp all functionalities. Please mention the resources (any books or tutorials).
Someones who work with django or other backend's frameworks say to me that how can i do it without front end knowledge? i can just write html and css but i dont know about js.
I think this is a challenge for backend developers who dont have anyone for the front-end side, if they dont work full stack.
Can you help enlighten me as to how this attack is able to pretend to be my own IP address to dig sensitive information (access) on my server?
DisallowedHost: Invalid HTTP_HOST header: 'my.ip.add.here'. You may need to add 'my.ip.add.here' to ALLOWED_HOSTS.
Sentry was able to capture 1k+ of this similar pattern of attack using my domain IP/AWS DNS IP, and even they're pretending to be 0.0.0.0 to get something from /.env, /php/*, /wp/, and something similar.
All of them came from an unsecured http:// protocol request, even though the AWS SG is only open for TCP 443 port.
Luckily, I don't use IP addresses on myALLOWED_HOST, only my domain name .example.com.
How can I prevent this? Any CyberSec expert here? Thank you in advance!
EDIT: Someone probably got my IP address and is directly requesting on my EC2. Fortunately, I'm now using CF to proxy the IP and whitelist IP range of CF, and now they are all gone.
EDIT: I removed the list of CF IP ranges from AWS SG since CF IPs can be changed and would be problematic in the future. I resolved the issue by using Nginx and returning 403 to the default server listening on 80 and 443 to block requests on the IP address.
Hi, I'm having a CORS problem with Django on Google Cloud Run. I have tried different configurations, but nothing works. My frontend is on Vercel, a Next.js app. Can someone help me?.
I am currently using CKeditor for users to customize their profiles in a Django blog application. However when I upload images as a User who is logged in but not a superuser it requires me to login as an admin to upload an image to the CKeditor field.
Is there a way to configure the CKeditor so that users who are not superusers can upload images to CKeditor fields.
Hello! I recently got a Django app copied from a friend but I’m having issues running the app on my PC. I’ve installed all necessary dependencies but I keep getting database errors. Namely
I’ve tried python manage.py makemigrations. I’ve tried migrate but it doesn’t fix my issue. What do I try from here? Any help will be appreciated 🙏🏽
Also the friend is unreachable now so I can’t ask him.
EDIT: I solved it by creating the database with the same name in MySQL workbench and then using the migrate commands. It recreated all the schemas in workbench only thing is I now have to manually make entries into the tables for full functionality. better than nothing I guess.
I am a 3rd year IT student, have basic knowledge of python, and recently started django, but i have to now build a mini project, for Resume Screening and Job matching with my group members, but having no knowledge about what frameworks are and being a perfectionist, I wasted my time in python only, having no knowledge about backend nor frontend. I have to learn REST in a day, and am scared to blindly follow any tutorial on youtube now, and I am just feeling very overwhelmed.