Account Options

  1. Sign in
The old Google Groups will be going away soon, but your browser is incompatible with the new version.
Google Groups Home
« Groups Home
Satchmo's django_livesettings - Can be dangerous
There are currently too many topics in this group that display first. To make this topic appear first, remove this option from another topic.
There was an error processing your request. Please try again.
flag
  1 message - Collapse all  -  Translate all to Translated (View all originals)
The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
 
From:
To:
Cc:
Followup To:
Add Cc | Add Followup-to | Edit Subject
Subject:
Validation:
For verification purposes please type the characters you see in the picture below or the numbers you hear by clicking the accessibility icon. Listen and type the numbers you hear
 
Benoit  
View profile  
 More options Nov 6 2010, 12:40 am
From: Benoit <benoitcsir...@gmail.com>
Date: Sat, 6 Nov 2010 00:40:42 -0400
Local: Sat, Nov 6 2010 12:40 am
Subject: Satchmo's django_livesettings - Can be dangerous

Hi friends,

Here's dangerous scenario that may occur if you are not using settings.py's
LIVESETTINGS_OPTIONS parameter with 'DB': False, as described
here<http://bitbucket.org/bkroeze/django-livesettings/src/tip/livesettings...>(which
was the case for me until I encountered the issue I am about to
describe).

-You create / use some tax module, let's say tax.modules.area
-In livesettings (yourshop.com/settings) , you set the tax module to "Area"
-Your shop goes live
-When the users does a checkout, the systems makes a DB request to find out
what tax module it should be using ->
livesettings.config_get_group('TAX').MODULE
-The DB request fails for some reason (dropped connection because of traffic
for example).
-Instead or Excepting, the systems defaults to the "NO TAX" module set as
default in satchmo tax's config.py. I think this is caused by this piece of
code<http://bitbucket.org/bkroeze/django-livesettings/src/tip/livesettings...>
.
-User checks out and *pays no taxes!!*

Important: This can happen for anything that depends on Livesettings, it can
affect shipping, taxes, payment, discounts....

So I strongly suggest that you use LIVESETTINGS_OPTIONS in production,
otherwise you will notice some very erratic behavior during peak time.

In addition, if the only reliable solution is to use LIVESETTINGS_OPTIONS,
why not simply drop django_livesettings and hard-code the configuration in
the settings.py file?

Benoit Clennett-Sirois


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
End of messages
« Back to Discussions « Newer topic     Older topic »