The Django Web Framework (EuroPython 2006)

Aug 2, 20123 likes2,882 views

The document summarizes the Django web framework. It describes key characteristics like clean URLs, loosely coupled components, and designer-friendly templates. It outlines components like URL dispatching, views, models, templates, forms, validation, administration, internationalization, and success stories. Django allows for really fast development, reuse of components, and less code through its architecture and features.

The Django Web Framework

Simon Willison
http://simonwillison.net/

EuroPython, 3rd July 2006

The Django Web Framework (EuroPython 2006)

Characteristics
Clean URLs
Loosely coupled components
Designer-friendly templates
Less code

Really fast development

http://www.example.com/poll/5/

What code shall we
execute?

(r'^$', 'views.index'),
(r'^hello/$', ‘views.hello'),
(r'^poll/(d+)/$', ‘views.poll'),

def index(request):
s = "Hello, World"
return HttpResponse(s)

def index(request):
name = request.GET['name']
s = "Hi, " + escape(name)
return HttpResponse(s)

...
(r'^poll/(d+)/$', 'views.poll'),
...

...
(r'^poll/(d+)/$', 'views.poll'),
...

def poll(request, poll_id):
poll = Poll.objects.get(
pk=poll_id
)
return HttpResponse(
'Question: ' + poll.question
)

class Poll(Model):
question = CharField(maxlength=200)
pub_date = DateTimeField()

class Choice(Model):
poll = ForeignKey(Poll)
choice = CharField(maxlength=200)
votes = IntegerField()

BEGIN;
CREATE TABLE "polls_poll" (
"id" serial NOT NULL PRIMARY KEY,
"question" varchar(200) NOT NULL,
"pub_date" timestamp with time zone
NOT NULL
);
CREATE TABLE "polls_choice" (
"id" serial NOT NULL PRIMARY KEY,
"poll_id" integer NOT NULL
REFERENCES "polls_polls" ("id"),
"choice" varchar(200) NOT NULL,
"votes" integer NOT NULL
);
COMMIT;

p = Poll(
question = "What's up?",
pub_date = datetime.now()
)
p.save()

p.choice_set.create(
choice = "Some choice",
votes = 0
)

>>> p.id
1

>>> p.question
"What's up?"

>>> p.choice_set.all()
[<Choice: Some choice>]

>>> Poll.objects.count()
7

>>> Poll.objects.filter(
pub_date__year = 2006,
pub_date__month = 5
)
["What's up?"]

>>> Poll.objects.all()[0:2]
["What's up", "Like Django?"]

c = Context({
'today': datetime.date.today(),
'edibles': ['pear', 'apple', 'orange']
})

<h1>Hello World!</h1>

<p>Today is {{ today|date:"jS F, Y" }}</p>

{% if edibles %}
<ul>
{% for fruit in edibles %}
<li>{{ fruit }}</li>
{% endfor %}
</ul>
{% endif %}

<h1>Hello World!</h1>

<p>Today is 2nd July, 2006</p>

<ul>
<li>pear</li>
<li>apple</li>
<li>orange</li>
</ul>

$def hello(request): return render_to_response('hello.html',{ 'today': datetime.date.today(), 'edibles': ['pear', 'apple', 'orange'] })$

base.html
<html>
<head>
<title>
{% block title %}{% endblock %}
</title>
</head>
<body>
{% block main %}{% endblock %}
<div id=”footer”>
{% block footer %}(c) 2006{% endblock %}
</div>
</body>
</html>

home.html

{% extends “base.html” %}
{% block title %}Homepage{% endblock %}

{% block main %}
Main page contents goes here.
{% endblock %}

combined
<html>
<head>
<title>
Homepage
</title>
</head>
<body>
Main page contents goes here.
<div id=”footer”>
(c) 2006
</div>
</body>
</html>

Bengali Japanese
Czech Dutch
Welsh Norwegian
Danish Brazilian
German Romanian
Greek Russian
English Slovak
Spanish Slovenian
French Serbian
Galician Swedish
Hebrew Ukrainian
Icelandic Simpliﬁed Chinese
Italian Traditional Chinese

msgid "Usernames cannot contain the '@' character."
msgstr "Ім'я не може містити '@' символ"

1. Display form

2. Validate submitted data

3. If errors, redisplay with:

3.1. Contextual error messages

3.2. Correct fields pre-filled

4. ... do something useful!

Model validation rules
+ the Manipulator API
do all of this for you

No time to talk about...

Generic views
Data object serialisation
Syndication framework
Middleware
Authentication and authorisation

170+ public Django-powered sites

http://code.djangoproject.com/wiki/DjangoPoweredSites

90+ contributors

1900+ mailing list subscribers (and 900+ on
the development list)

And the Journal-World have convinced three
new people to go and work in Kansas

$def hello(request): return render_to_response('hello.html',{ 'today': datetime.date.today(), 'edibles': ['pear', 'apple', 'orange'] })$

This document discusses cheap tricks for startups to experiment and deploy features quickly. It recommends using feature flags to control features for different users, deploying to staging environments first, and using read-only mode for low-risk deployments. It also suggests adding created/updated date fields to all tables to easily track site growth over time, and storing daily report calculations in the database to graph metrics over time. The overall message is that these techniques allow for easy, fast, and cheap experimentation, deployment, and analytics.

Building Things Fast - and getting approvalSimon Willison

The document summarizes Simon Willison's talk at An Event Apart Chicago 2009 about building things fast using modern web development techniques and tools. The talk discusses trends in rapid interactive development using client-side JavaScript, web frameworks that facilitate quick prototyping and deployment, and building a Twitter client in under 50 lines of JavaScript code to demonstrate these techniques.

Cowboy development with DjangoSimon Willison

Gem christmas calendarerichsen

Yql && RaphaëlLachlan Hardy

Simple Web Apps With Sinatraa_l

The document describes how to build simple web applications using the Sinatra microframework in Ruby. It introduces REST and the MVC pattern, and shows how to create GET and POST routes to retrieve and handle data. An example app is built that checks if one Twitter user follows another by calling the Twitter API from routes and methods. Views are rendered using ERB templates. The app demonstrates rapid prototyping of a RESTful API using Sinatra's lightweight syntax.

FamilySearch Reference ClientDallan Quass

SproutCore is Awesome - HTML5 Summer DevFesttomdale

jQuery Anti-Patterns for Performance & CompressionPaul Irish

The document discusses various jQuery anti-patterns that can negatively impact performance and compression. It describes caching selections, using document fragments to append content outside of loops, avoiding unnecessary re-querying of elements, and leveraging event delegation with delegate() instead of binding individual handlers. The document emphasizes optimizing selector syntax from right to left, avoiding universal selectors, and detaching elements from the DOM when manipulating them to improve speed.

Yql hacku iitd_2012Anshu Prateek

YQL (Yahoo Query Language) allows users to easily access and manipulate data from various web services and APIs by writing simple SQL-like queries. It provides a unified interface for retrieving, filtering, and combining data from over 1,255 sources. YQL queries can select, insert, update, and delete data, allowing users to build mashups and hack together systems quickly using readily available web data. Many popular APIs and services like Twitter, Facebook, YouTube, and Google are accessible through YQL, eliminating the need to deal directly with each API's documentation, authentication, and data formats.

Hacking up location aware appsAnshu Prateek

20111014 mu me_j_querymobileErik Duval

This document discusses jQuery Mobile, a framework for building mobile web sites and apps. It is built on jQuery and jQuery UI and optimized for touch interactions. Key features highlighted include support for mobile events like tap and swipe, progressive enhancement to provide graceful degradation across devices, and animated page transitions using Ajax. jQuery Mobile uses a multi-page template structure and supports transition effects between pages. The document provides examples of jQuery Mobile markup and methods for selecting and manipulating page elements with jQuery. Resources for learning more about jQuery Mobile are also listed.

Coming to Terms with GraphQLBruce Williams

No longer a niche technology, GraphQL has reached mainstream status. It’s in use across a wide swath of companies ranging from small, scrappy startups to large, lumbering enterprises. You can find it driving UIs for media companies, in public APIs for third-party developers, in internal APIs used for IT infrastructure, and embedded in databases. Some of these companies are using Elixir to build their GraphQL systems, and you can too. After covering some introductory material on GraphQL, we’ll dive in and look at how we can add it to our applications using Absinthe, the GraphQL toolkit for Elixir—and discuss why the BEAM provides some distinct advantages for GraphQL APIs at scale. (Presented 2019-01-31 at the Elixir & Erlang SF Meetup.)

Mume JQueryMobile IntroGonzalo Parra

This document discusses jQuery Mobile, a mobile web framework built on jQuery and jQuery UI. It is optimized for touch interactions and uses progressive enhancement to provide a good experience across different mobile device capabilities. Key features highlighted include support for mobile events like tap and swipe, navigation between pages within a single HTML document, and transition effects between pages. The document provides code examples and resources for further learning jQuery Mobile.

Cheap frontend tricksambiescent

One Size Fits AllClaudio Meinberg

USC Yahoo! BOSS, YAP and YQL OverviewJonathan LeBlanc

Introduction to JqueryAmzad Hossain

Simplifying Code: Monster to Elegant in 5 Stepstutec

The document discusses techniques for refactoring code, including intention revealing methods, null objects, and replacing large methods with method objects. Intention revealing methods transform comments into descriptive method names to improve code readability. Null objects avoid null values and unnecessary conditionals. Large methods can be refactored by extracting the logic into a new class. The goal of refactoring is to improve code quality, shared understanding, and prevent bugs and performance issues.

You're Doing It Wrongbostonrb

- Rake tasks should be moved out of the tasks file and into model classes to allow for easier testing. This allows for mocking, stubbing, and other test isolation techniques. - Views can be refactored to reduce duplication and improve organization. Partial templates, content blocks, and helpers can be used to DRY up views and make them more flexible. - Content blocks and partials allow sections like page titles, sidebars, and other portions to be pulled into templates in a customizable way. This avoids hard-coding parts of pages.

Rails Antipatterns | Open Session with Chad Pytel Engine Yard

As developers worldwide have adopted the Ruby on Rails web framework, many have fallen victim to common mistakes that reduce code quality, performance, reliability, stability, scalability, and maintainability. Even experienced developers will find that they can reevaluate the work they've done and make it better. In this session, Chad Pytel will provide an overview of some of these common mistakes as well as take questions from the audience and provide real-world advice. Bring your issues and get expert advice on how to bring your code in line with today's best practices.

Introduction to jQuery - Barcamp London 9Jack Franklin

This document introduces jQuery, a JavaScript library that simplifies HTML document manipulation and AJAX interactions. It allows selecting elements, handling events, animating elements, and making AJAX requests. Some key benefits of jQuery include being cross-browser compatible, having excellent documentation, being widely adopted, and being lightweight. The document provides many code examples demonstrating how to select elements, handle events, animate elements, traverse the DOM, make AJAX requests, and more using jQuery.

Sql inyectionAlonso Cerdas

Hi5 Opensocial Code Lab Presentationplindner

The document provides information about hi5, an OpenSocial-based social networking platform. It details hi5's large user base globally and in specific regions. It then outlines how to build basic OpenSocial gadgets for hi5 including retrieving user data, storing app data, and integrating with hi5 features like activities and notifications. Finally, it mentions upcoming dates related to an app launch and hackathon on hi5.

Laravel 로 배우는 서버사이드 #5성일 한

This document describes how to build a bulletin board application in Laravel. It covers setting up the application structure with Blade views and layouts, connecting to a MySQL database to manage users and posts, creating Eloquent models, and building out the controller logic for common actions like registration, login, creating, editing, and deleting posts. Key sections include setting up the MVC framework with routes and controllers, implementing authentication with sessions, and using relationships and pagination for working with related data.

Django の認証処理実装パターン / Django Authentication PatternsMasashi Shibata

Pagination in PHPVineet Kumar Saini

The document discusses pagination in PHP by creating a database connection, querying the database to get the number of total records and the records for the current page based on the limit, and outputting navigation links to move between pages. Code is provided to connect to a database, get the total number of rows and rows for the current page based on the page number parameter, output navigation links and the records for the current page in a table.

PHP and Rich Internet Applicationselliando dias

The Django Web Application FrameworkSimon Willison

The Django Web Application Framework is a Python-based web framework that provides tools and features for building web applications quickly and easily. It includes components for HTTP handling, URL routing, templating, database access, forms, internationalization, and an optional administrative interface. Django emphasizes clean and pragmatic design with philosophy of "batteries included but removable".

A Basic Django IntroductionGanga Ram

This document provides an introduction to web development with the Django framework. It outlines Django's project structure, how it handles data with models, and its built-in admin interface. It also covers views, templates, forms, and generic views. Django allows defining models as Python classes to represent the database structure. It provides a production-ready admin interface to manage data. URLs are mapped to views, which can render templates to generate responses. Forms validate and display data. Generic views handle common tasks like displaying object lists.

More Related Content

What's hot (20)

jQuery Anti-Patterns for Performance & CompressionPaul Irish

Yql hacku iitd_2012Anshu Prateek

Hacking up location aware appsAnshu Prateek

20111014 mu me_j_querymobileErik Duval

Coming to Terms with GraphQLBruce Williams

Mume JQueryMobile IntroGonzalo Parra

Cheap frontend tricksambiescent

One Size Fits AllClaudio Meinberg

USC Yahoo! BOSS, YAP and YQL OverviewJonathan LeBlanc

Introduction to JqueryAmzad Hossain

Simplifying Code: Monster to Elegant in 5 Stepstutec

You're Doing It Wrongbostonrb

Rails Antipatterns | Open Session with Chad Pytel Engine Yard

Introduction to jQuery - Barcamp London 9Jack Franklin

Sql inyectionAlonso Cerdas

Hi5 Opensocial Code Lab Presentationplindner

Laravel 로 배우는 서버사이드 #5성일 한

Django の認証処理実装パターン / Django Authentication PatternsMasashi Shibata

Pagination in PHPVineet Kumar Saini

PHP and Rich Internet Applicationselliando dias

jQuery Anti-Patterns for Performance & CompressionPaul Irish

Yql hacku iitd_2012Anshu Prateek

Hacking up location aware appsAnshu Prateek

20111014 mu me_j_querymobileErik Duval

Coming to Terms with GraphQLBruce Williams

Mume JQueryMobile IntroGonzalo Parra

Cheap frontend tricksambiescent

One Size Fits AllClaudio Meinberg

USC Yahoo! BOSS, YAP and YQL OverviewJonathan LeBlanc

Introduction to JqueryAmzad Hossain

Simplifying Code: Monster to Elegant in 5 Stepstutec

You're Doing It Wrongbostonrb

Rails Antipatterns | Open Session with Chad Pytel Engine Yard

Introduction to jQuery - Barcamp London 9Jack Franklin

Sql inyectionAlonso Cerdas

Hi5 Opensocial Code Lab Presentationplindner

Laravel 로 배우는 서버사이드 #5성일 한

Django の認証処理実装パターン / Django Authentication PatternsMasashi Shibata

Pagination in PHPVineet Kumar Saini

PHP and Rich Internet Applicationselliando dias

Similar to The Django Web Framework (EuroPython 2006) (20)

The Django Web Application FrameworkSimon Willison

A Basic Django IntroductionGanga Ram

Introduction to Python and Djangosolutionstreet

Python was created by Guido van Rossum in the late 1980s and named after Monty Python. It is a general purpose, high-level programming language that supports multiple paradigms like object-oriented, functional, and imperative programming. Django is a Python web framework that grew out of a newspaper project and follows the MVC pattern, separating concerns into models, views, templates. It provides tools for authentication, forms, administration, and more so that developers can focus on their specific applications.

Introduction to DjangoJagdeep Singh Malhi

Django is a Python web framework that allows for rapid development of web applications. It includes features like an object relational mapper, template language, form handling, and more. To use Django, you create models to define the application's data structures, views to handle requests and return responses, and URLs to map requests to views. The Django admin interface provides a quick way to manage models in the database. Overall, Django aims to relieve web developers of low-level tasks so they can focus on writing application logic.

Introduction to Djangocolinkingswood

Django is a high-level Python web framework that encourages rapid development and clean design. It includes features like an object-relational mapper, automatic admin interface, URL dispatcher, template system, cache system, internationalization support, form handling, and more. Django reads metadata from models to generate a production-ready admin interface for adding and updating content. Views interact with models to generate querysets for templates to display as responses. The framework handles common tasks to allow developers to focus on project-specific code.

Tango with djangoRajan Kumar Upadhyay

An Introduction to Django Web FrameworkDavid Gibbons

Django is a Python web framework created in 2003 that encourages rapid development and clean, pragmatic design. It uses a Model-View-Controller architectural pattern with models representing database tables, views containing logic, and templates for user-facing content. Some key features include automatically generated admin interfaces, URL routing, forms handling, internationalization support, and various utilities like static file management. Django is highly customizable and promotes code reuse and modularity through applications that can be combined for a project. It is one of the most popular web frameworks and powers many major sites today.

CCCDjango2010.pdfjayarao21

This document provides an overview and introduction to web programming using the Python Django web framework. It discusses what Django is and its key features like pluggable apps, an object-relational mapper for databases, an automatic admin interface, templates, and URL structure. The core components of models, views, templates, and URLs are explained. Models are used to store and retrieve data from databases. Views are functions that generate web pages by utilizing models and templates. Templates contain tags to dynamically output content. URLs are mapped to views using a configuration file. The document also covers forms, the admin interface, and provides examples throughout.

djangowebuploader

The document provides an overview of the Django web framework's documentation. It outlines the essential documentation sections for getting started, including the Django overview, installation guide, tutorial, and FAQs. It also describes the reference sections that cover various Django features like models, templates, forms, testing, and add-ons. The document recommends reading the essential documentation first before exploring the other reference sections as needed.

Python & Django TTTkevinvw

Here are the key approaches to caching in Django: - Per site caching (generic approach) - Cache entire pages without GET/POST parameters and only for anonymous users. - Per view caching (granular approach) - Cache responses of individual views by decorating them with @cache_page and setting timeouts. - Template fragment caching (micro manage approach) - Cache fragments of templates, both static and dynamic, by using the {% cache %} tag and specifying keys. - Low level caching (micro micro manage) - Cache individual parameters by storing and retrieving from the cache backend directly in the views. The level of caching ranges from generic site-wide caching to fine-grained fragment caching. Per view and

django_introduction20141030Kevin Wu

This document provides an overview and introduction to the Django web framework. It discusses that Django is a free and open-source Python framework that encourages rapid development and clean design. It follows the MVC pattern and includes an ORM, automatic admin interface, templating system, and more. The document then discusses starting a Django project, creating apps, defining URLs and views, using templates, and includes an appendix on additional topics like models and sending mail.

Django 1.10.3 Getting startedMoniaJ

بررسی چارچوب جنگوrailsbootcamp

This document provides an overview of Django, a popular Python web framework. It discusses key features of Django including its MVT architecture, ORM, admin interface, and template system. It also covers common Django practices like project structure, apps, settings, models, views, URLs, forms, and using the Django REST framework to build APIs. Major sections include installation, configuration, building models, views, templates, and forms.

dJangoBob Chao

The document introduces Django, an open-source web framework written in Python. It provides an overview of Django, including its MVC structure, status updates, installation guide, basic tutorials, and features such as forms, generic views, sessions, caching, middleware, and its standard library. The document encourages learning additional skills like HTML, CSS, JavaScript, and SQL to become a strong web developer using Django.

Introduce DjangoChui-Wen Chiu

Tango with djangoJaysinh Shukla

DjangoNarcisse Siewe

This document provides an overview of the key components of Django, including designing models, installing Django, accessing the model API, creating an admin interface, designing URLs and views, writing templates, and more. It explains these concepts at a high level and provides examples to illustrate how each component works and fits together. The goal is to help new users understand the basics of how to build a database-driven web application with Django.

Introduction to DjangoJoaquim Rocha

Intro to Web Development Using Python and DjangoChariza Pladin

This document outlines an introductory course on web development using Python and the Django web framework. The course agenda includes introductions to Python programming, setting up a Django project, creating models and populating a database, configuring URLs and views, and using Django templates. The instructor will demonstrate how to set up a development environment, build a basic polls application with Django, and display data through the admin interface and web pages. Attendees will learn basic Python concepts, write simple programs, and create their first Django-powered websites over the course of discussions and hands-on coding labs.

Web development with django - Basics PresentationShrinath Shenoy

Django is a Python web framework that follows an MVT architecture. It uses ORM to interact with databases and includes templates to separate presentation from logic. Popular sites like Instagram and Mozilla use Django. A Django project is created using the startproject command and contains apps, URLs, views, models, forms, and templates. Django encourages DRY principles and reusability through its built-in features, plugins, and customizable components.

The Django Web Application FrameworkSimon Willison

A Basic Django IntroductionGanga Ram

Introduction to Python and Djangosolutionstreet

Introduction to DjangoJagdeep Singh Malhi

Introduction to Djangocolinkingswood

Tango with djangoRajan Kumar Upadhyay

An Introduction to Django Web FrameworkDavid Gibbons

CCCDjango2010.pdfjayarao21

djangowebuploader

Python & Django TTTkevinvw

django_introduction20141030Kevin Wu

Django 1.10.3 Getting startedMoniaJ

بررسی چارچوب جنگوrailsbootcamp

dJangoBob Chao

Introduce DjangoChui-Wen Chiu

Tango with djangoJaysinh Shukla

DjangoNarcisse Siewe

Introduction to DjangoJoaquim Rocha

Intro to Web Development Using Python and DjangoChariza Pladin

Web development with django - Basics PresentationShrinath Shenoy

More from Simon Willison (20)

How Lanyrd does GeoSimon Willison

This document discusses the features of an event discovery and recommendation website. It uses MapBox maps, suggests events based on contacts and interests, and shows event details pages. Users can track topics by location and the site has a hierarchical place database. It provides rich snippets, GeoRSS feeds, and supports search within areas by indexing the place hierarchy. Events have primary venues to plot on maps and the site integrates with Foursquare.

Building LanyrdSimon Willison

How we bootstrapped Lanyrd using Twitter's social graphSimon Willison

This document describes how Lanyrd.com bootstrapped their social event and speaker database site by leveraging Twitter's social graph and APIs. They were able to quickly build profiles for 500 speakers before launching by accessing public Twitter account information. Using Twitter follower data stored in Redis and speaker information indexed by Solr, Lanyrd can provide personalized event recommendations to users. While relying on Twitter introduced some risks, it was an effective way to initially populate the site with user and event data.

Web Services for Fun and ProfitSimon Willison

Web services and APIs allow large websites like Yahoo to be built and maintained, enable internal innovation through mashups, and allow external developers to build new products and services using publicly available data and functionality. They help address issues like security, scaling, and making changes by separating concerns between interfaces and implementations. Events like d.Construct promote discussion and innovation around emerging technologies like Ajax, APIs, and mobile applications.

Tricks & challenges developing a large Django applicationSimon Willison

The document discusses tricks and challenges for developing large Django applications. It outlines three tricks: 1) Signing data to pass through untrusted sources without tampering; 2) Adding a cache version field to models to invalidate cached queries; 3) Using NoSQL databases like Redis and Solr for denormalizing data to allow flexible queries across entities. Redis sets are used to track relationships like followers and event attendees for recommendations.

Advanced Aspects of the Django Ecosystem: Haystack, Celery & FabricSimon Willison

How Lanyrd uses TwitterSimon Willison

Lanyrd.com is a website that provides a definitive database of professional events and speakers, enables social recommendations of events, and includes comprehensive speaker profiles with archived materials like slides and videos. It utilizes crowdsourcing and shared contributions from users (a wiki-style model). The site integrates heavily with Twitter to discover event discussions, promote speaker profiles, and provide recommendation features based on a user's Twitter follows. It aims to make professional conferences and networking more effective.

ScaleFailSimon Willison

This document summarizes the steps taken to optimize the performance of a website for reviewing parliamentary expenses. Initially, querying for unreviewed pages was causing high CPU usage on the database server. To address this, the count of unreviewed pages was cached in Memcached, reducing CPU usage. Other optimizations included migrating the database to InnoDB, adding a "next" button that redirects to a random unreviewed page, and caching the list of unreviewed page IDs in Memcached for faster random access. During a future scale issue, Redis will be used instead of Memcached. Putting the site in read-only mode also helped during a period of high load.

Rediscovering JavaScript: The Language Behind The LibrariesSimon Willison

This document provides a summary of the evolution of JavaScript libraries from 2004 to 2005. It discusses how in 2004, JavaScript was not taken seriously by most developers. A few libraries like Prototype.js emerged in 2005, helping popularize JavaScript for dynamic effects like drag and drop. This led to a flurry of library development in 2005, including early versions of jQuery, MochiKit and YUI. These libraries had different philosophies but helped unlock JavaScript's potential and make it a first-class language for web development.

Building crowdsourcing applicationsSimon Willison

Evented I/O based web servers, explained using bunniesSimon Willison

Crowdsourcing with DjangoSimon Willison

Crowdsourcing involves building a website to allow users to review and annotate MP expense documents. The site was built quickly using Django within a week. It uses models to represent MPs, expenses documents, pages, and user annotations. Unreviewed pages were cached to improve performance when getting a random next page. As usage increased, the database was migrated and caching was added. Over 70,000 pages were reviewed, showing how crowdsourcing can be used for document review at scale.

Django HeresiesSimon Willison

This document contains Simon Willison's heresies about Django. Some of the heresies discussed include that the {% if %} tags in Django templates suck, that silencing template errors is a bad idea, and that settings.py causes problems. Alternatives proposed include using a smarter {% if %} tag snippet, not silencing errors, and allowing per-application settings instead of one global settings file. The document also advocates for improving testing and documentation in the Django community.

Class-based views with DjangoSimon Willison

This document discusses class-based views in Django. It covers Django's emphasis on reusability through generic views and a thriving ecosystem of third-party applications. Generic views encapsulate common patterns like listing and editing objects. While powerful, generic views have some limitations like an inability to swap the ORM. The document also discusses making the admin interface more customizable and decoupled from Django through subclassing, as well as implementing fine-grained permissions by overriding methods in ModelAdmin subclasses. Finally, it suggests that any component that follows the request-response pattern could be implemented as a class, including decorators.

Web App Security Horror StoriesSimon Willison

This document summarizes Simon Willison's talk on web app security vulnerabilities and lessons learned from past mistakes. It discusses cross-site scripting (XSS) vulnerabilities that allow attackers to steal users' cookies or show fake login pages. It also covers SQL injection attacks, cross-site request forgery (CSRF), and how even features like CSS can be exploited. Past incidents like Samy's MySpace worm and the Google UTF-7 hole are examined to illustrate the dangers if vulnerabilities are left unaddressed. The talk emphasizes following best practices like parameterization and CSRF tokens to prevent common exploits.

Web Security Horror StoriesSimon Willison

When Zeppelins Ruled The EarthSimon Willison

When Ajax Attacks! Web application security fundamentalsSimon Willison

The document is a presentation about web application security fundamentals and attacks. It discusses topics like cross-site scripting (XSS), cross-site request forgery (CSRF), UTF-7 encoding, and other techniques like JSON parsing (JSONP). In the past, security tutorials focused on not trusting user input, avoiding SQL injection, and preventing JavaScript injection, but the presenter aims to discuss more modern attacks.

I love Zeppelins, and you should tooSimon Willison

OpenID at Open Tech 2008Simon Willison

Simon Willison discusses the benefits of decentralized social networks and open authentication standards like OpenID. OpenID allows users to log into multiple websites using a single digital identity and their chosen identity provider, rather than having separate usernames and passwords for each site. It works by the website requesting identity assertions from the user's OpenID provider which are signed statements about the user's identity.

How Lanyrd does GeoSimon Willison

Building LanyrdSimon Willison

How we bootstrapped Lanyrd using Twitter's social graphSimon Willison

Web Services for Fun and ProfitSimon Willison

Tricks & challenges developing a large Django applicationSimon Willison

Advanced Aspects of the Django Ecosystem: Haystack, Celery & FabricSimon Willison

How Lanyrd uses TwitterSimon Willison

ScaleFailSimon Willison

Rediscovering JavaScript: The Language Behind The LibrariesSimon Willison

Building crowdsourcing applicationsSimon Willison

Evented I/O based web servers, explained using bunniesSimon Willison

Crowdsourcing with DjangoSimon Willison

Django HeresiesSimon Willison

Class-based views with DjangoSimon Willison

Web App Security Horror StoriesSimon Willison

Web Security Horror StoriesSimon Willison

When Zeppelins Ruled The EarthSimon Willison

When Ajax Attacks! Web application security fundamentalsSimon Willison

I love Zeppelins, and you should tooSimon Willison

OpenID at Open Tech 2008Simon Willison

Recently uploaded (20)

Microsoft Build 2025 takeaways in one presentationDigitalmara

Microsoft Build 2025 introduced significant updates. Everything revolves around AI. DigitalMara analyzed these announcements: • AI enhancements for Windows 11 By embedding AI capabilities directly into the OS, Microsoft is lowering the barrier for users to benefit from intelligent automation without requiring third-party tools. It's a practical step toward improving user experience, such as streamlining workflows and enhancing productivity. However, attention should be paid to data privacy, user control, and transparency of AI behavior. The implementation policy should be clear and ethical. • GitHub Copilot coding agent The introduction of coding agents is a meaningful step in everyday AI assistance. However, it still brings challenges. Some people compare agents with junior developers. They noted that while the agent can handle certain tasks, it often requires supervision and can introduce new issues. This innovation holds both potential and limitations. Balancing automation with human oversight is crucial to ensure quality and reliability. • Introduction of Natural Language Web NLWeb is a significant step toward a more natural and intuitive web experience. It can help users access content more easily and reduce reliance on traditional navigation. The open-source foundation provides developers with the flexibility to implement AI-driven interactions without rebuilding their existing platforms. NLWeb is a promising level of web interaction that complements, rather than replaces, well-designed UI. • Introduction of Model Context Protocol MCP provides a standardized method for connecting AI models with diverse tools and data sources. This approach simplifies the development of AI-driven applications, enhancing efficiency and scalability. Its open-source nature encourages broader adoption and collaboration within the developer community. Nevertheless, MCP can face challenges in compatibility across vendors and security in context sharing. Clear guidelines are crucial. • Windows Subsystem for Linux is open-sourced It's a positive step toward greater transparency and collaboration in the developer ecosystem. The community can now contribute to its evolution, helping identify issues and expand functionality faster. However, open-source software in a core system also introduces concerns around security, code quality management, and long-term maintenance. Microsoft’s continued involvement will be key to ensuring WSL remains stable and secure. • Azure AI Foundry platform hosts Grok 3 AI models Adding new models is a valuable expansion of AI development resources available at Azure. This provides developers with more flexibility in choosing language models that suit a range of application sizes and needs. Hosting on Azure makes access and integration easier when using Microsoft infrastructure.

Offshore IT Support: Balancing In-House and Offshore Help Desk Techniciansjohn823664

In today's always-on digital environment, businesses must deliver seamless IT support across time zones, devices, and departments. This SlideShare explores how companies can strategically combine in-house expertise with offshore talent to build a high-performing, cost-efficient help desk operation. From the benefits and challenges of offshore support to practical models for integrating global teams, this presentation offers insights, real-world examples, and key metrics for success. Whether you're scaling a startup or optimizing enterprise support, discover how to balance cost, quality, and responsiveness with a hybrid IT support strategy. Perfect for IT managers, operations leads, and business owners considering global help desk solutions.

UiPath Community Berlin: Studio Tips & Tricks and UiPath InsightsUiPathCommunity

Join the UiPath Community Berlin (Virtual) meetup on May 27 to discover handy Studio Tips & Tricks and get introduced to UiPath Insights. Learn how to boost your development workflow, improve efficiency, and gain visibility into your automation performance. 📕 Agenda: - Welcome & Introductions - UiPath Studio Tips & Tricks for Efficient Development - Best Practices for Workflow Design - Introduction to UiPath Insights - Creating Dashboards & Tracking KPIs (Demo) - Q&A and Open Discussion Perfect for developers, analysts, and automation enthusiasts! This session streamed live on May 27, 18:00 CET. Check out all our upcoming UiPath Community sessions at: 👉 https://community.uipath.com/events/ Join our UiPath Community Berlin chapter: 👉 https://community.uipath.com/berlin/

Dr Jimmy Schwarzkopf presentation on the SUMMIT 2025 ADr. Jimmy Schwarzkopf

Introduction and Background: Study Overview and Methodology: The study analyzes the IT market in Israel, covering over 160 markets and 760 companies/products/services. It includes vendor rankings, IT budgets, and trends from 2025-2029. Vendors participate in detailed briefings and surveys. Vendor Listings: The presentation lists numerous vendors across various pages, detailing their names and services. These vendors are ranked based on their participation and market presence. Market Insights and Trends: Key insights include IT market forecasts, economic factors affecting IT budgets, and the impact of AI on enterprise IT. The study highlights the importance of AI integration and the concept of creative destruction. Agentic AI and Future Predictions: Agentic AI is expected to transform human-agent collaboration, with AI systems understanding context and orchestrating complex processes. Future predictions include AI's role in shopping and enterprise IT.

Dev Dives: System-to-system integration with UiPath API WorkflowsUiPathCommunity

Join the next Dev Dives webinar on May 29 for a first contact with UiPath API Workflows, a powerful tool purpose-fit for API integration and data manipulation! This session will guide you through the technical aspects of automating communication between applications, systems and data sources using API workflows. 📕 We'll delve into: - How this feature delivers API integration as a first-party concept of the UiPath Platform. - How to design, implement, and debug API workflows to integrate with your existing systems seamlessly and securely. - How to optimize your API integrations with runtime built for speed and scalability. This session is ideal for developers looking to solve API integration use cases with the power of the UiPath Platform. 👨‍🏫 Speakers: Gunter De Souter, Sr. Director, Product Manager @UiPath Ramsay Grove, Product Manager @UiPath This session streamed live on May 29, 2025, 16:00 CET. Check out all our upcoming UiPath Dev Dives sessions: 👉 https://community.uipath.com/dev-dives-automation-developer-2025/

European Accessibility Act & Integrated Accessibility TestingJulia Undeutsch

Emma Dawson will guide you through two important topics in this session. Firstly, she will prepare you for the European Accessibility Act (EAA), which comes into effect on 28 June 2025, and show you how development teams can prepare for it. In the second part of the webinar, Emma Dawson will explore with you various integrated testing methods and tools that will help you improve accessibility during the development cycle, such as Linters, Storybook, Playwright, just to name a few. Focus: European Accessibility Act, Integrated Testing tools and methods (e.g. Linters, Storybook, Playwright) Target audience: Everyone, Developers, Testers

Improving Developer Productivity With DORA, SPACE, and DevExJustin Reock

GDG Cloud Southlake #43: Tommy Todd: The Quantum Apocalypse: A Looming Threat...James Anderson

The Quantum Apocalypse: A Looming Threat & The Need for Post-Quantum Encryption We explore the imminent risks posed by quantum computing to modern encryption standards and the urgent need for post-quantum cryptography (PQC). Bio: With 30 years in cybersecurity, including as a CISO, Tommy is a strategic leader driving security transformation, risk management, and program maturity. He has led high-performing teams, shaped industry policies, and advised organizations on complex cyber, compliance, and data protection challenges.

TrustArc Webinar: Mastering Privacy ContractingTrustArc

As data privacy regulations become more pervasive across the globe and organizations increasingly handle and transfer (including across borders) meaningful volumes of personal and confidential information, the need for robust contracts to be in place is more important than ever. This webinar will provide a deep dive into privacy contracting, covering essential terms and concepts, negotiation strategies, and key practices for managing data privacy risks. Whether you're in legal, privacy, security, compliance, GRC, procurement, or otherwise, this session will include actionable insights and practical strategies to help you enhance your agreements, reduce risk, and enable your business to move fast while protecting itself. This webinar will review key aspects and considerations in privacy contracting, including: - Data processing addenda, cross-border transfer terms including EU Model Clauses/Standard Contractual Clauses, etc. - Certain legally-required provisions (as well as how to ensure compliance with those provisions) - Negotiation tactics and common issues - Recent lessons from recent regulatory actions and disputes

Supercharge Your AI Development with Local LLMsFrancesco Corti

In today's AI development landscape, developers face significant challenges when building applications that leverage powerful large language models (LLMs) through SaaS platforms like ChatGPT, Gemini, and others. While these services offer impressive capabilities, they come with substantial costs that can quickly escalate especially during the development lifecycle. Additionally, the inherent latency of web-based APIs creates frustrating bottlenecks during the critical testing and iteration phases of development, slowing down innovation and frustrating developers. This talk will introduce the transformative approach of integrating local LLMs directly into their development environments. By bringing these models closer to where the code lives, developers can dramatically accelerate development lifecycles while maintaining complete control over model selection and configuration. This methodology effectively reduces costs to zero by eliminating dependency on pay-per-use SaaS services, while opening new possibilities for comprehensive integration testing, rapid prototyping, and specialized use cases.

Measuring Microsoft 365 Copilot and Gen AI SuccessNikki Chapple

Session | Measuring Microsoft 365 Copilot and Gen AI Success with Viva Insights and Purview Presenter | Nikki Chapple 2 x MVP and Principal Cloud Architect at CloudWay Event | European Collaboration Conference 2025 Format | In person Germany Date | 28 May 2025 📊 Measuring Copilot and Gen AI Success with Viva Insights and Purview Presented by Nikki Chapple – Microsoft 365 MVP & Principal Cloud Architect, CloudWay How do you measure the success—and manage the risks—of Microsoft 365 Copilot and Generative AI (Gen AI)? In this ECS 2025 session, Microsoft MVP and Principal Cloud Architect Nikki Chapple explores how to go beyond basic usage metrics to gain full-spectrum visibility into AI adoption, business impact, user sentiment, and data security. 🎯 Key Topics Covered: Microsoft 365 Copilot usage and adoption metrics Viva Insights Copilot Analytics and Dashboard Microsoft Purview Data Security Posture Management (DSPM) for AI Measuring AI readiness, impact, and sentiment Identifying and mitigating risks from third-party Gen AI tools Shadow IT, oversharing, and compliance risks Microsoft 365 Admin Center reports and Copilot Readiness Power BI-based Copilot Business Impact Report (Preview) 📊 Why AI Measurement Matters: Without meaningful measurement, organizations risk operating in the dark—unable to prove ROI, identify friction points, or detect compliance violations. Nikki presents a unified framework combining quantitative metrics, qualitative insights, and risk monitoring to help organizations: Prove ROI on AI investments Drive responsible adoption Protect sensitive data Ensure compliance and governance 🔍 Tools and Reports Highlighted: Microsoft 365 Admin Center: Copilot Overview, Usage, Readiness, Agents, Chat, and Adoption Score Viva Insights Copilot Dashboard: Readiness, Adoption, Impact, Sentiment Copilot Business Impact Report: Power BI integration for business outcome mapping Microsoft Purview DSPM for AI: Discover and govern Copilot and third-party Gen AI usage 🔐 Security and Compliance Insights: Learn how to detect unsanctioned Gen AI tools like ChatGPT, Gemini, and Claude, track oversharing, and apply eDLP and Insider Risk Management (IRM) policies. Understand how to use Microsoft Purview—even without E5 Compliance—to monitor Copilot usage and protect sensitive data. 📈 Who Should Watch: This session is ideal for IT leaders, security professionals, compliance officers, and Microsoft 365 admins looking to: Maximize the value of Microsoft Copilot Build a secure, measurable AI strategy Align AI usage with business goals and compliance requirements 🔗 Read the blog https://nikkichapple.com/measuring-copilot-gen-ai/

Introducing the OSA 3200 SP and OSA 3250 ePRCAdtran

End-to-end Assurance for SD-WAN & SASE with ThousandEyesThousandEyes

Kubernetes Cloud Native Indonesia Meetup - May 2025Prasta Maha

Palo Alto Networks Cybersecurity FoundationVICTOR MAESTRE RAMIREZ

Grannie’s Journey to Using Healthcare AI ExperiencesLauren Parr

STKI Israel Market Study 2025 final v1 versionDr. Jimmy Schwarzkopf

Agentic AI - The New Era of IntelligenceMuzammil Shah

This presentation is specifically designed to introduce final-year university students to the foundational principles of Agentic Artificial Intelligence (AI). It aims to provide a clear understanding of how Agentic AI systems function, their key components, and the underlying technologies that empower them. By exploring real-world applications and emerging trends, the session will equip students with essential knowledge to engage with this rapidly evolving area of AI, preparing them for further study or professional work in the field.

Gihbli AI and Geo sitution |use/misuse of Ai Technologyzainkhurram1111

Protecting Your Sensitive Data with Microsoft Purview - IRMS 2025Nikki Chapple

Session | Protecting Your Sensitive Data with Microsoft Purview: Practical Information Protection and DLP Strategies Presenter | Nikki Chapple (MVP| Principal Cloud Architect CloudWay) & Ryan John Murphy (Microsoft) Event | IRMS Conference 2025 Format | Birmingham UK Date | 18-20 May 2025 In this closing keynote session from the IRMS Conference 2025, Nikki Chapple and Ryan John Murphy deliver a compelling and practical guide to data protection, compliance, and information governance using Microsoft Purview. As organizations generate over 2 billion pieces of content daily in Microsoft 365, the need for robust data classification, sensitivity labeling, and Data Loss Prevention (DLP) has never been more urgent. This session addresses the growing challenge of managing unstructured data, with 73% of sensitive content remaining undiscovered and unclassified. Using a mountaineering metaphor, the speakers introduce the “Secure by Default” blueprint—a four-phase maturity model designed to help organizations scale their data security journey with confidence, clarity, and control. 🔐 Key Topics and Microsoft 365 Security Features Covered: Microsoft Purview Information Protection and DLP Sensitivity labels, auto-labeling, and adaptive protection Data discovery, classification, and content labeling DLP for both labeled and unlabeled content SharePoint Advanced Management for workspace governance Microsoft 365 compliance center best practices Real-world case study: reducing 42 sensitivity labels to 4 parent labels Empowering users through training, change management, and adoption strategies 🧭 The Secure by Default Path – Microsoft Purview Maturity Model: Foundational – Apply default sensitivity labels at content creation; train users to manage exceptions; implement DLP for labeled content. Managed – Focus on crown jewel data; use client-side auto-labeling; apply DLP to unlabeled content; enable adaptive protection. Optimized – Auto-label historical content; simulate and test policies; use advanced classifiers to identify sensitive data at scale. Strategic – Conduct operational reviews; identify new labeling scenarios; implement workspace governance using SharePoint Advanced Management. 🎒 Top Takeaways for Information Management Professionals: Start secure. Stay protected. Expand with purpose. Simplify your sensitivity label taxonomy for better adoption. Train your users—they are your first line of defense. Don’t wait for perfection—start small and iterate fast. Align your data protection strategy with business goals and regulatory requirements. 💡 Who Should Watch This Presentation? This session is ideal for compliance officers, IT administrators, records managers, data protection officers (DPOs), security architects, and Microsoft 365 governance leads. Whether you're in the public sector, financial services, healthcare, or education. 🔗 Read the blog: https://nikkichapple.com/irms-conference-2025/