magic-removal: Merged to [1686]

git-svn-id: http://code.djangoproject.com/svn/django/branches/magic-removal@1687 bcc190cf-cafb-0310-a4f2-bffc1f526a37

1 files changed, 12 insertions, 0 deletions

diff --git a/docs/tutorial01.txt b/docs/tutorial01.txt
index 5ed5e25bbe..5feb51a27d 100644
--- a/docs/tutorial01.txt
+++ b/docs/tutorial01.txt
@@ -32,6 +32,18 @@ its setup.py utility. If it's not on your path, you can find it in
 ``site-packages/django/bin``; consider symlinking to it from some place
 on your path, such as /usr/local/bin.)
 
+.. admonition:: Where should this code live?
+
+   If your background is in PHP, you're probably used to putting code under the
+   Web server's document root (in a place such as ``/var/www``). With Django,
+   you don't do that. It's not a good idea to put any of this Python code within
+   your Web server's document root, because it risks the possibility that
+   people may be able to view your code over the Web. That's not good for
+   security.
+
+   Put your code in some directory **outside** of the document root, such as
+   ``/home/mycode``.
+
 A project is a collection of settings for an instance of Django -- including
 database configuration, Django-specific options and application-specific
 settings. Let's look at what ``startproject`` created::