Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
w3blog is a simple blog engine for Django, with some focus on multilingual capabilities. It includes all of the basic features expected of a traditional Web log (also known as blog), as well as multilingual features, i.e. translations of blog posts which are delivered automatically in the user's preferred language using the internationalization capabilities of Django, enabling the possibility of targeting people from different countries in a single blog/site.
This django app is still a work in progress. More features will be added/completed in the near future. Currently the app's strings are translated only to English (en), Russian (ru), and Spanish (es).
To install, run "pip install w3blog". Currently tested to be compatible with Django 1.11 and 2.0.
CSS and JS have been completely reworked to get rid of bloat (ie Bootstrap and JQuery), and provide a much nicer default look. Besides those improvements, new features include:
If you encounter any errors or problems when using this Django app, please do make sure to open an issue on this project's Github page, or if you don't have Github account (and don't wish to create one), send me an email at contact@yaroslavps.com. Note: if you are using something like outlook (or any other big company email) my response email might end up in your spam folder or might be even blocked altogether by your email provider.
Add "weblog" to your INSTALLED_APPS setting in your settings.py
Include the app as well as django-summernote in your project's urls.py; for example:
url(r'^blog/', include('weblog.urls')),
url(r'^summernote/', include('django_summernote.urls')),
Migrate the models to the database by running "python manage.py migrate".
You can configure and customize the blog by adding and modifying to your liking/needs the following settings to your settings.py:
WEBLOG_SETTINGS = {
'enable_comments': False,
'allow_anon_comments': False,
'multilingual': True,
'blog_title': 'Django-Weblog',
'base_template': 'weblog_base.html',
'show_author': True,
'use_authors_username': True,
'show_sidebar': True,
'show_categories': False,
'show_archive': True,
'posts_per_page': 10,
'dynamic_load': False, # New in version 0.5
'infinite_load': False, # New in version 0.5
'floating_sidebar': False, # New in version 0.5. Doesn't affect small screens (ie mobile devices, etc.)
'enable_rss': True,
'home_title': 'Welcome to the blog!',
}
Read more about it here: https://www.yaroslavps.com/weblog/python/w3blog-blog-engine/
Note: This package depends on the following python packages (besides Django and their dependencies): django-summernote
This project was previously named django-weblog, however, I had to renamed it due to there being an existing package with the same name in PyPI.
You can view a short summary of changes for each release in the releases section of the project's page on Github.
Note: If you had already made migrations by yourself for this app before version 0.5.2, you might notice that django is telling you that there are new unapplied migrations. Apply them as you usually would, and if a "Programming Error: column "x" exists in..." happens, run "python manage.py migrate --fake weblog".
FAQs
A simple blog engine for Django with multilingual capabilities.
We found that w3blog demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.