- Zope-Dev - Zope lists

FTP + Versions
by Toby Dickenson 16 Mar '00

16 Mar '00

Ive been suffering from the lack of Version support in FTP. Here a howto documenting an ugly (but practical) solution. http://www.zope.org/Members/htrd/howto/VersionFTPServer Toby Dickenson tdickenson(a)geminidataloggers.com

1 0

ZCatalog size index ?
by sergey2b 16 Mar '00

16 Mar '00

Hi. What is the size of an index in ZCatalog in compare of the initial size of the documents ? Sergey.

1 0

Re: [Zope-dev] DocumentTemplate with a (bigger) brain
by Rik Hoekstra 16 Mar '00

16 Mar '00

Hello all, I'm an old bobo fan who hasn't done much with the full zope. For the record I'd like to encourage y'all to keep things modular - everyone of us can benefit from parts of zope even if we can't - or aren't allowed - to use the whole thing. Anyway, I've got a horrendously complicated site I'm working on with loads of really, really ugly javascript for things like fancy buttons, menus, &c. The typical widget has an external javascript file, plus css on each individual page, and then a bunch of divs and images that are document.written on the client side when the page is loaded. (Please don't flame if this is flawed, I'm not a Real Programmer [yet]) Thus you have three places where the page is affected by a widget: <head> [script: external javascript file] [css definitions] </head> <body> [html defining widget] </body> I would like to define a widget object that can display itself through dtml, but I wonder if dtml is capable of such a thing. When parsing a template, it would need to backtrack and insert additional css and/or a new external script tag at the top of the page. Here's what I want as input: <head> <title>check the fancy butts d00d!</title> </head> <body> <dtml-var super-cool-button> </body> And output: <head> <title>check the fancy butts d00d!</title> <script src="fancybutt.js"></script> <style> #butt1 { position: etc } </style> </head> <body> <div id="butt1"> etc </div> </body> Of course if there are two buttons on the page, this gets more complicated as each one will need to have unique names, and they will probably also have to be initializes onload. Thus the tag needs to have 1) some sort of memory, and 2) needs to be able to affect parts of the page outside the scope of the tag itself. So - can this be implemented with DocumentTemplate, perhaps with a custom dtml tag? Will it have to be done in two passes, or is there an idea for a better way? <RH> It is not too difficult but complicated. You can't have dtml backtracking I believe. if you have several buttons you may do it like this (perhaps that's what you meant with two passes) In pseudocode - with lack of Zope support I'm afraid you will have to sort out the organization of things for yourself :-(: [dtml header] [dtml-var <buttonmethod(buttons=[button1, button2, etc])>] [dtml-footer] then buttonmethod has a [dtml-var <buttonjavascript(buttons=buttons)>] [dtml-var <buttonstyle(buttons=buttons)>] </head> [dtml-var <buttonimages(buttons=buttons)>] </body> each of the dtml-var has a method calling button specific methods. It would be a good idea to put each of the different items associated with a button in a different directory (for example: javascript, style and and images), and give in the directories them the name of the button (so in total for button1 you have three dtml files called (for example) 'button1.dtml' in three directories. for example <buttonjavascript> buttonjavascript [dtml-in buttons] [dtml-var button1] (however that may work) [/dtml-in] same for <buttonstyle> and <buttonimage> This is complicated, but it will get you what you want. </RH> Or even better, has anyone else come up with a nice widget implementation? <RH> There is a ZClass for rotating images with javascript, but I'm afraid it's rather Zope specific.</RH> HTH Rik

1 0

how to create records
by fog＠mixadlive.com 16 Mar '00

16 Mar '00

hi *, i looked in the docs but i didn't find any hint on how to create records, i.e., the ones generated inside the <form> tag by the :record keyword. i want to create a fake record and pass it to the action page without having to pass through the form but... no way. any suggestions? federico -- Federico Di Gregorio MIXAD LIVE System Programmer fog(a)mixadlive.com Debian GNU/Linux Developer & Italian Press Contact fog(a)debian.org Put a GNOME on your desktop! [http://www.gnome.org] -- brought to you by One Line Spam

1 0

use of exec in products considered harmful?
by Jonothan Farr 15 Mar '00

15 Mar '00

I'm considering doing something in the LocalFS product that seems like a potentially huge security risk, which is calling exec on a string submitted through a form. The reason is that I want to allow users to customize the object class associated with different content-types when the product constructs a Zope object from a local file. I need a way for them to specify the arguments to the object constructor from the management interface. The solution I came up with is rather awkward but I can't think of a better one. Suppose 'c' is a string containing, for example, "OFS.DTMLMethod.DTMLMethod(data, __name__=id)". This is the code to construct the object: try: # this should hopefully avoid executing # malicious python code if ';' in c: raise ValueError m = c[:string.rindex(c, '.')] exec('import ' + m) exec('ob = ' + c) except: pass I'm hoping that by disallowing ';' in the string I can avoid malicious code like: OFS.DTMLMethod.DTMLMethod(data, __name__=id); print "Hi. I've got control of your server now. Have a nice day." Can anyone else think of how this code can still be exploited? Can anyone think of a better, safer way to do this altogether? Is any of this making sense? Thanks, -jfarr

3 6

Text index on a Lines property [REPHRASE]
by Jason Spisak 15 Mar '00

15 Mar '00

Catalogers, The reason I figured it wasn't indexing the lines was because it was an address, and I was searching on the zip code. It doesn't bring up the zip code. Are strings of just numbers ommitted from the text index too? Michel? i.e. '90048' All my best, -- Jason Spisak 444(a)hiretechs.com

2 1

ZScheduler version 0.0.3
by Loren Stafford 15 Mar '00

15 Mar '00

Alpha version 0.0.3 of ZScheduler, available at http://www.zope.org/Members/lstaffor/ZScheduler/ supports subclassing ZEvent in a ZClass, which should make it much more useful. You can override the "reschedule" method in the ZClass to implement your own rescheduling policy. For example, a reschedule method that simply says: <dtml-call "REQUEST.set('ZEventTime', REQUEST.ZEventOldTime + 1.0/24)"> causes the ZEvent to be repeated hourly. This is alpha software, tested with Zope 2.1.4 on Windows 98 only. Don't deploy in a production environment. I've had one report that it "freezes" Zope on Linux, but no details. My plans are to test next on Solaris, later on Linux. -- Loren

2 2

Add list name programmatically
by Jason Spisak 15 Mar '00

15 Mar '00

Zopists, How do you retrieve the addlist name for a meta_type progarmatically? All my best, -- Jason Spisak 444(a)hiretechs.com

2 2

Problems with Data.fs
by Fabio Augusto Mazzarino 15 Mar '00

15 Mar '00

Hi folks. I was trying to install nisUserFolder when something happened and my Zope stoped working. When I fixed it I realized that the most important folder isn't working anymore. It returns the following error: Zope Error Zope has encountered an error while publishing this resource. AttributeError Sorry, a Zope error occurred. Traceback (innermost last): File /usr/src/Zope-2.1.3-src/lib/python/ZPublisher/Publish.py, line 214, in publish_module File /usr/src/Zope-2.1.3-src/lib/python/ZPublisher/Publish.py, line 179, in publish File /usr/src/Zope-2.1.3-src/lib/python/Zope/__init__.py, line 202, in zpublisher_exception_hook (Object: ElementWithAttributes) File /usr/src/Zope-2.1.3-src/lib/python/ZPublisher/Publish.py, line 151, in publish File /usr/src/Zope-2.1.3-src/lib/python/ZPublisher/BaseRequest.py, line 424, in traverse File /usr/src/Zope-2.1.3-src/lib/python/ZPublisher/BaseRequest.py, line 498, in old_validation (Object: broken) AttributeError: __getitem__ I really need to recover this folder (sorry, no backup - dumb). Could anybody help me, please. Thanx. Fabio Augusto Mazzarino Radium Systems - Sao Carlos - Brazil

1 0

Re: [Zope-dev] Tree tag expand_all bug
by Petr Knapek 15 Mar '00

15 Mar '00

>>>>> On Tue, 14 Mar 2000 15:27:53 -0500, Jason Spisak <444(a)hiretechs.com> said: Hi Jason and all, I would like to report the same bug. Me and Jason have reported this bug a few days ago on Zope list, but no response. Below, you can see little more about this bug it is a copy of what I have posted on Zope list. Hi Zopists, I have tried to expand tree and a Zope error has appeared. Below, you can see setting up of expand_all variable together with the beginning of my tree. The collapse_all is working without any problem, the tree collapses when the collapse_all is set up to '1'. The problem is only with the expand_all. Is it Zope bug or something wrong on my side? part of my code <A HREF="<dtml-var URL0>?expand_all=1"><IMG SRC="/p_/pl" ALT="Expand" BORDER="0"> <dtml-tree branches_expr="objectValues(['Folder', 'DTML Document', 'File', 'Image'])" skip_unauthorized=1 sort=is_sort_objects> Zope Error Zope has encountered an error while publishing this resource. Error Type: KeyError Error Value: branches Troubleshooting Suggestions This resource may be trying to reference a nonexistent object or variable branches. The URL may be incorrect. The parameters passed to this resource may be incorrect. A resource that this resource relies on may be encountering an error. For more detailed information about the error, please refer to the HTML source for this page. If the error persists please contact the site maintainer. Thank you for your patience. Traceback (innermost last): File /usr/lib/zope/lib/python/ZPublisher/Publish.py, line 214, in publish_module File /usr/lib/zope/lib/python/ZPublisher/Publish.py, line 179, in publish File /usr/lib/zope/lib/python/Zope/__init__.py, line 202, in zpublisher_exception_hook (Object: ElementWithAttributes) File /usr/lib/zope/lib/python/ZPublisher/Publish.py, line 165, in publish File /usr/lib/zope/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: is_tree_manage) File /usr/lib/zope/lib/python/ZPublisher/Publish.py, line 102, in call_object (Object: is_tree_manage) File /usr/lib/zope/lib/python/OFS/DTMLMethod.py, line 145, in __call__ (Object: is_tree_manage) File /usr/lib/zope/lib/python/DocumentTemplate/DT_String.py, line 502, in __call__ (Object: is_tree_manage) File /usr/lib/zope/lib/python/TreeDisplay/TreeTag.py, line 154, in render (Object: a tree tag) File /usr/lib/zope/lib/python/TreeDisplay/TreeTag.py, line 210, in tpRender (Object: ElementWithAttributes) KeyError: (see above) Thank you, Petr JS> Anyone...Petr Did anyone speek up about the tree tag JS> expand_all=1 bug that returns a name error "Branches"? I JS> haven't seen a reply on this and it's a pretty basic function JS> ofthe tree tag that isn't working now. JS> All my best, JS> -- Jason Spisak 444(a)hiretechs.com JS> _______________________________________________ Zope-Dev JS> maillist - Zope-Dev(a)zope.org JS> http://lists.zope.org/mailman/listinfo/zope-dev ** No cross JS> posts or HTML encoding! ** (Related lists - JS> http://lists.zope.org/mailman/listinfo/zope-announce JS> http://lists.zope.org/mailman/listinfo/zope ) I hope that somebody will response. Thanks, Petr -- Petr Knápek PVT.NET, e-mail: petr.knapek(a)pvt.net, tel:+420-5-41 558 394 PVT a.s. - pvt.net, Veveří 102, 659 10 Brno, Czech Republic

1 0