Is it needed to add reCaptcha to built in Django's login form? -
hello i'm new django , i'm using django's built in forms login users, have contact form i'm using google recaptcha avoid attacks.
i wondering if needed add recaptcha login form. have heard django takes care of security , don't want repeat code if default login form prepared brute force attacks.
in case better add recaptcha default login form how can process validation? in contact form call google's api verify user click within views, don't feel comfortable adding code inside auth_views.loginview class.
thanks!
django not take care of rate-limiting forms, including login.
i think idea include sort of rate-limiting security measure login form. re-captcha might overkill default, unless there several incorrect attempts within timeframe.
take @ django rate-limit project easy implement alternative captcha.
in order add recaptcha login view, rather modifying auth_views.loginview
class, create new view extends class. can add recaptcha form validation in contact form.
then can update url point custom view , template:
url(r'^login/$', custom_auth_views.recaptcha_login, {'template_name': 'core/recaptcha_login.html'}, name='login'),
see this post on how extend login views / templates.
Comments
Post a Comment