DJ CHECKUP

Building this personal site of mine you are currently visiting has taught me many things...and continues to teach. The web, bringing a site up to production, securtiy and so much more.

Based on the great work of Sasha Romijn (Pony CheckUp) there is a helpful site maintained by Stuart Maxwell called DJ CHECKUP.

DJ Checkup is essentialy a tool for when one reaches a "deploy to production point" on a Django project. One can enter the site url and have a series of checks run against the site.

These are fundamental base checks that ensure a site is set up without major holes.

What are the current checks?

• Have you disabled DEBUG mode?
• Is your site using HTTPS?
• Can we find your admin site, and is it only accessible through HTTPS?
• Can we find a user login page, and is it only accessible through HTTPS?
• Do you have the CSRF cookie on pages with forms?
• Have you enabled HSTS?
• Have you configured the X-Frame header?
• Is the TRACE HTTP method disabled?

Clicking on any of the article links above can point you in the right direction in achieving one or all of these checks.