Django on Gaëtan Grond

Django Packages I Have Used and Loved in 2024

Fri, 03 Jan 2025 15:37:34 +0200

It has been almost 4 years since I launched my SaaS business in Django, while fancier Python frameworks have been released since then, Django still remains king of the Python web framework. Thanks to an ever-growing ecosystem of packages and their outstanding stability.

Only the most useful and stable packages have made the cut, links to the official package source are included in the title itself.

8 Django Tips and Tricks Learned Over the Years

Tue, 12 Nov 2024 00:00:00 +0000

After working with Django for more than 4 years both professionally and personally, I have learned a lot of tips and tricks that I wish I knew when I started. In this article I will share some of the most important ones that I have learned over the years.

Since Django documentation is very good, I will not share many code snippets, but rather explain the concepts and provide links to the official documentation. All of these tips and tricks came from my own experience, the Django documentation, and Two Scoops of Django book.

Protecting Data in Django Admin: Preventing Accidental Deletions

Mon, 23 Sep 2024 10:20:23 +0200

The Django admin interface is one of the standout features that make Django such a powerful framework. It allows you to manage your data, customers, and models with ease. However, as with any tool that provides significant control over your application’s data, there’s a need to ensure that sensitive actions like deletions are handled carefully.

Storing List in Models with Django

Wed, 04 Sep 2024 08:53:57 +0000

Three ways to store a list in a Django model — ArrayField, JSONField and a related model — and how to pick the right one.

How to Add MFA to Django Allauth in Under 5mn

Wed, 13 Mar 2024 01:25:57 +0100

Add TOTP multi-factor authentication to a Django project with django-allauth, from installation to custom templates, in about five minutes.

Understanding IDOR Vulnerability in Django and how to fix it

Tue, 15 Aug 2023 00:45:40 +0200

Django is by design very secure, most of the common vulnerabilities such as XSS, CSRF, SQL injection, clickjacking are fixed by the simple use of the framework, but there is one that is not fixed by default, and it is the Idor vulnerability.

In this article we will see what it is and how to fix it.

Create a Simple Maintenance Feature in Django

Sat, 05 Aug 2023 13:10:40 +0200

When working with Django for my startup I performed on several occasions very complex migrations and maintenance tasks that required the site not to be accessible for a few minutes and sometimes even hours.

Even if the end user is not able to access the site, our team of superusers and admins should be able to access the site and perform the maintenance tasks.

Secure Your Django Administration with 6 simple steps

Thu, 03 Aug 2023 07:00:00 +0000

One of the most loved features of Django is the built-in administration interface. It allows for an easy way to manage your data and is highly customizable. However, it is also a very common target for attackers.

In this article, we will look at some of the most common attacks against the Django administration interface and how to protect against them.

How to Customize The CSRF Failure View in Django

Tue, 01 Aug 2023 13:02:50 +0200

When working with Django and third party libraries, you may encounter a CSRF error on login or any other form submission. This is because Django requires a CSRF token to be sent with every form submission except GET requests or if the form has the csrf_exempt decorator.

During my work with Django, I have encountered this error many times, sometimes due to my own mistakes and sometimes due to third party libraries or user behavior.