diff options
| author | Prabhu Ramachandran | 2011-11-12 10:02:57 +0530 |
|---|---|---|
| committer | Prabhu Ramachandran | 2011-11-12 10:02:57 +0530 |
| commit | fb31dcc7693395c9856fb19c3e867fbfa2e9b4f8 (patch) | |
| tree | 24b50d4bce7ac5faa5ec6ae98db041766340814b /README.txt | |
| parent | c69bc272c1c3ba02c3f244586b65254036e73de3 (diff) | |
| download | online_test-fb31dcc7693395c9856fb19c3e867fbfa2e9b4f8.tar.gz online_test-fb31dcc7693395c9856fb19c3e867fbfa2e9b4f8.tar.bz2 online_test-fb31dcc7693395c9856fb19c3e867fbfa2e9b4f8.zip | |
ENH: Running remote code safely via XMLRPC.
Adding a python_server which executes code as nobody safely so users
cannot do too much damage.
Diffstat (limited to 'README.txt')
| -rw-r--r-- | README.txt | 17 |
1 files changed, 12 insertions, 5 deletions
@@ -19,17 +19,24 @@ To install/deploy this app follow the steps below: Note that you can supply multiple xml files as arguments and all of those will be added to the database. - - 5. Now, run:: + + 5. First run the python server provided. This ensures that the code is + executed in a safe environment. Do this like so:: + + $ sudo python python_server.py + + Using sudo is necessary since the server is run as the user "nobody". + + 6. Now, run:: $ python manage.py runserver <desired_ip>:<desired_port> - 6. Go to http://server_ip:server_port/admin + 7. Go to http://server_ip:server_port/admin - 7. Login with your credentials and look at the questions and modify if + 8. Login with your credentials and look at the questions and modify if needed. - 7. Now ask users to login at: + 9. Now ask users to login at: http://server_ip:server_port/exam And you should be all set. |