diff options
| author | Luke Plant <L.Plant.98@cantab.net> | 2022-01-04 05:47:24 +0000 |
|---|---|---|
| committer | Mariusz Felisiak <felisiak.mariusz@gmail.com> | 2022-01-04 06:48:19 +0100 |
| commit | 77531695850befad4dda7f9a0ce9e78b131ab5e1 (patch) | |
| tree | 16420ca3c6b2f16e211aecbb742d1689ff1791b6 /docs | |
| parent | fe59bf202d35467e3e4a169c1aac979b713a020a (diff) | |
[4.0.x] Avoided suggestion of plain text database password in sessions topic.
Backport of ccafad2e429468c518c80fb178f9e7a3f06e78e1 from main
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/topics/http/sessions.txt | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docs/topics/http/sessions.txt b/docs/topics/http/sessions.txt index 9c662b87b5..34dabdd536 100644 --- a/docs/topics/http/sessions.txt +++ b/docs/topics/http/sessions.txt @@ -417,7 +417,7 @@ This simplistic view logs in a "member" of the site:: def login(request): m = Member.objects.get(username=request.POST['username']) - if m.password == request.POST['password']: + if m.check_password(request.POST['password']): request.session['member_id'] = m.id return HttpResponse("You're logged in.") else: |