Added a note that you deal with files. Really.

bartTC · Aug 3, 2009 · e548e7c · e548e7c
1 parent 71e4ca1
commit e548e7c
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 3 deletions.
diff --git a/README.rst b/README.rst
@@ -43,6 +43,20 @@ Installation:
    This only works for the templatetags, the admin still allows anybody to add
    or delete attachments.
 
+
+Mind that you serve files!
+==========================
+
+django-attachments stores the files in your site_media directory and does not modify
+them. For example, if an user uploads a .html file your webserver will probably display
+it in HTML. It's a good idea to serve such files as plain text. In a Apache2
+configuration this would look like:: 
+
+    <Location /site_media/attachments>
+        AddType text/plain .html .htm .shtml .php .php5 .php4 .pl .cgi
+    </Location>
+
+
 Usage:
 ======
 
@@ -121,11 +135,15 @@ Quick Example:
 Changelog:
 ==========
 
+v0.3.1 (2009-07-29):
+
+    * Added a note to the README that you should secure your static files.
+
 v0.3 (2009-07-22):
 
     * This version adds more granular control about user permissons. You need
       to explicitly add permissions to users who should been able to upload,
       delete or delete foreign attachments. 
 
       This might be **backwards incompatible** as you did not need to assign add/delete
-      permissions before!
+      permissions before!
diff --git a/setup.cfg b/setup.cfg
@@ -1,2 +1,2 @@
 [egg_info]
-tag_build = dev
+tag_build = dev
diff --git a/setup.py b/setup.py
@@ -2,7 +2,7 @@
 
 setup(
     name='django-attachments',
-    version='0.3',
+    version='0.3.1',
     description='A generic Django application to attach Files (Attachments) to any model',
     long_description=open('README.rst').read(),
     author='Martin Mahner',