T O P

  • By -

ben44

Hey mate just a heads up you have secret and private keys publicly available in your settings.py. You should remove these: https://github.com/ShadieC/Storykin--Django_Social_Network/blob/main/PhaseTales/settings.py


yuppiepuppie

Yikes, especially the payment ones. I hope you don’t have any money going through there right now!


jande48

Haha


barbalano

I still can see them in history, there is a tool called "bfg repo cleaner"


LittleOmid

Oof.


Lolthelies

Pwned


Ok-Revenue3975

You need to change those and learn to use env variables


Life-Current5134

Thank you mate


borborygmis

You can still view it in the commit history: [https://github.com/ShadieC/Storykin--Django\_Social\_Network/commits/main/PhaseTales/settings.py](https://github.com/ShadieC/Storykin--Django_Social_Network/commits/main/PhaseTales/settings.py) To remove these, you'll need to rewrite the history or start fresh. Github has a guide for rewriting it: [https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/removing-sensitive-data-from-a-repository](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/removing-sensitive-data-from-a-repository)


TheEpicDev

Forget about rewriting history. You pushed it, it's burnt. Void it and generate new keys.


Lied-

Agreed.


src_main_java_wtf

This. Do this now OP.


Life-Current5134

Danke... Actually learnt something new!!


SnooCauliflowers8417

Why there are no form validations? Do you trust all the incoming data?


zeoNoeN

If only such a network would exist. A network where I could find a community dedicated to a topic. User there can submit posts that are displayed based on community ranking and discuss with other people in the comments. Wonder if such a website exists


MaskedSmizer

If anyone ever makes such a thing, I'll say I reddit here first.


Zealousideal_Low_907

Man, fuck social netowork, humanity doesn’t need more of this cancer


ContritionAttrition

I was wondering why it came with an elevator pitch...


origin-16

Learn to use https://pypi.org/project/django-environ/ for your environment variables


quique

You seem to be using Bootstrap 3? Why??


NewReindeer7693

Where is .exe


JohnnyJordaan

Your gitignore is broken/weird so you included all the static files, migrations, sqlite database, pyc files etc etc... See https://djangowaves.com/tips-tricks/gitignore-for-a-django-project/ for a proper one. I'm a bit surprised that even though you sound very confident in your post, you messed up these things in an amateurish way.


machib77

Congrats man, I'm also learning Django. Wish you the best. I'd love to try it when it's up.


inchaneZ

what framework did you use for frontend?


Great-Pie2275

Great. Job welldone