December 1999 - Zope

Re: [Zope] RedHat Secure Web Server 3.1 & Zope 2.1 & MySQL
by Teodor Cimpoesu 06 Dec '99

06 Dec '99

CURTIS David wrote: > > Hi, > > My Web site got hacked. I was told that RedHat Secure Web Server 3.1 can prevent certain types of attacks. Does Zope run on Secure Web Server 3.1? I was running Apache and Zope (ZAP) together before. Not knowing exactly the method of my server's breach makes it hard to prevent further attacks but what is best way to prevent such problems again? Quick: Go to freashmeat.net, search for ``saint'' install it, run full test, read carefully the results, take quick measures. Long: How do you know it was hack? Do you have any traces? Most af the hacks I've heard implied exploits of wrong written perl scripts *grin* Check all your scripts that uses high privileges or do weird things. Err, one more Q, it wasn't hack though Zope, was it? -- CIMPOESU Teodor, Web Programmer @ DIGICOM S.A. Bucharest, Romania @ Internet, site development @ teo(a)digiro.net , +(401)-330.47.28 official home page ~ http://www.digiro.net/ Internet web page ~ http://internet.digiro.net/

1 0

RE: [Zope] WebDav wishful thinking WEBCR ideas.questions
by Brian Lloyd 06 Dec '99

06 Dec '99

> I confess I don't understand this WebDav stuff yet. But > reading about it > has got me dreaming again on a favorite theme: choreography and > temporal-spatial indexing of networked information > > <snip> > > Is it possible for make a drg'n'drop page in Zope which would > allow for > fast and efficient building of web pages> For example where > there are many > links and lists. The immediate pragmatic application is the > endless need to > compile pages of web-related research with href links and build this > quickly among a group of people over the web. > > <snip> > > What I want to do is drag'n'drop from the already open pages > onto a Zope > page and then the following actions will automatically occur: > > 1. Title and href link will be added > 2. any selected text on the page will be copied as well under > href link > 3. An email will be sent alerting users 'subscribed' to this > page of new > links and/or update notice Jason, WebDAV really doesn't have anything to do with those sort of things - it is really a "content management protocol" in that it lets you treat certain Zope objects as if they were files on a remote filesystem from a WebDAV-enabled client. It doesn't really have anything to do with the sort of visual page building ideas you are asking about. You can find out more about what DAV is and is not from www.webdav.org. Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

RE: [Zope] dtml-if
by Chris McDonough 06 Dec '99

06 Dec '99

> I can't figure out how to write this simple expression. I am trying to > compare 2 variable in a dtml-if statement. > > ---variables: > username: <dtml-var username><br> > AUTHENTICATED_USER: <dtml-var AUTHENTICATED_USER><br> > > ---output: > username: dan > AUTHENTICATED_USER: dan > > ---expression: > <dtml-if "username == AUTHENTICATED_USER"> > > > ---evaluates false and I can't figure out why! Have also tried > <dtml-if "username == REQUEST['AUTHENTICATED_USER']"> > to no avail. In the if expression you're using (username==ATHENTICATED_USER), you're comparing an object to a string. AUTHENTICATED_USER is a Zope object, not a string. You want: <dtml-if "username==AUTHENTICATED_USER.getUserName()">

3 2

WAP anyone ?
by Jason Cunliffe 06 Dec '99

06 Dec '99

Hello Does anyone know of Python or Zope work on/with/for WAP - Wireless Application Protocol ? ..Some WAP links, in case you don't know what I am acronyming about: Ericsson http://www.ericsson.se/WAP/ Nokia http://www.nokia.com/corporate/wap/gateway.html The WAP Forum http://www.wapforum.org/ Thanks - Jason ------------------------------------------------- Jason Cunliffe <jasonic(a)nomadicsltd.com> NOMADICS.STUDIO(Design Director) Geo-Digital Arts and Technology Le Vieux Moulin, Route de Mons 83440 SEILLANS, FRANCE Tel: +33 (0)4 94.76.98.72 Fax: +33 (0)4 94.76.97.77

2 1

Displaying the text content of a ZClass
by Alexandre Ratti 06 Dec '99

06 Dec '99

Hello, I've created a ZClass that subclasses CatalogAware, DTMLDocument and DTMLMethod. This Zclass has several properties. It also has a text content. This content is entered in a textarea field in a form and saved with <dtml-call "manage_edit(REQUEST.data, REQUEST.title)"> just as in a DTML method. This works fine. The ZClass content is displayed with a method called index_html (nothing fancy). This method displays property values and the text content. Eg. <dtml-var standard_html_header> ... standard HTML stuff for ZClass instances ... <dtml-var myProp1> - <dtml-var myProp2> <HR> <dtml-var raw> </dtml-var standard_html_footer> Problem: this works OK as long as the ZClass text doesn't content nested DTML. <dtml-var raw> tag just inserts the text content as is. It is unrendered (I suppose that's why it's called "raw"). <dtml-var title> is sent as is to the browser. => How can I display the rendered text content for a ZClass? It sounds simple but I'm stuck. => I'll rephrase the question: imagine you want to wrap DTML Methods in a ZClass to make them CatalogAware and add custom properties. How do you display the content of the ZClass instances ? Thanks. Alexandre

1 0

RSS/RDF
by Alwyn Schoeman 06 Dec '99

06 Dec '99

Could someone please explain to me what it is and how it works, or point me to some URL's? Thank you -- ~~~~~~~~~~~~~~ Alwyn Schoeman Systems Engineer Prism Secure Solutions

1 0

old website
by Tom Deprez 06 Dec '99

06 Dec '99

Some people asked me to re-show my old web-site around Zope and postgressql. Ok, here it is again. But, be aware! The website is rather old and... at that time we're using Zope 1.10.x http://gallery.uunet.be/tom.deprez/Master/ Regards, Tom.

1 0

Fwd: Re: [Zope] manage_editProperties in ZClasses
by - 06 Dec '99

06 Dec '99

On Sun, 05 Dec 1999, you wrote: > On Sat, Dec 04, 1999 at 12:26:21PM +0800, - wrote: > > hi all, > > how do i change the default value of textarea (cols) from 35 to something else? > > i edited Property.py in lib/python/ZClasses, changing line 199 > > -- <textarea name="%s:text" rows="6" cols="75"><dtml-var %s > > ></textarea>''' > > saved it, restart zope and tried changing my ZClass property. biut i still got > > the cols=35. what did i miss? > > Completely shutdown Zope, make your change, delete the associated .pyc > file (I'd guess that it is lib/Python/ZClasses/Property.pyc) so that > Python is forced to actually look at your .py file (should be doing this > anyway b/c of timestamps, but make sure) and restart Zope. > did as you say, shutdown zope, removed Property.pyc, edit Property.py, start zope. went to manage_main, still textarea remains with default cols (35). checked Property.pyc, it does have my cols value (80). perhaps DC could give users the ability to change the textarea size, like they did on other management interfaces. anyways, i've decided to construct my own form for adding/editing properties. the only hitch i got is when editing properties, i can't reuse the old id. i need to create a new id and delete the old id. or did i not see the obvious solution? thanks for all help Am I Evil? ------------------------------------------------------- Am I Evil?

1 0

how to upload text?
by John Edstrom 06 Dec '99

06 Dec '99

I want to make a form where a variable can take input either from a textarea form element, or from a file upload. I've seen some things about how to upload files, but I don't want to save the data as files, I want to load it into a textarea form element where it can be edited if needed and then it will be saved in a database. Is there an example or a recipe to do this anywhere? thanks, john

2 1

Re: Zope and FastCGI
by Jochen Haeberle 06 Dec '99

06 Dec '99

Jimbo, thanks to your tip zope is running on apache with FastCgi now. Rather often I get the following error >HTTP/1.1 200 OK Date: Mon, 06 Dec 1999 07:28:07 GMT Server: >Apache/1.3.9 (Unix) mod_ssl/2.4.6 >OpenSSL/0.9.4 PHP/4.0B3-dev PHP/3.0.13-dev mod_fastcgi/2.2.3 >X-Powered-By: Zope (www.zope.org) Python >(www.python.org) Content-Length: 10314 Connection: close >Content-Type: text/html > >OK > >The server encountered an internal error or misconfiguration and was >unable to complete your request. > >Please contact the server administrator, webmaster(a)MIDRAS.de and >inform them of the time the error >occurred, and anything you might have done that may have caused the error. > >More information about this error may be available in the server error log. > > >Apache/1.3.9 Server at test.neue-rundschau.de Port 80 The apache-error-log tells the following on the request: >[Mon Dec 6 08:28:07 1999] [error] [client 212.14.64.240] FastCGI: >comm with server "/serve/nr/zope" aborted: protocol error: invalid >version: 61 != FCGI_VERSION(1) As I am alone on this server at the moment, this seems to become a major problem when the system is on load... Does anyone have an idea on that messages??? Jochen At 17:48 Uhr -0600 05.12.1999, Jimbo Bahooli wrote: >Hello, I ran into the same problem that you mention, this is what you >need to do to fix it. > >Have zope create the socket in /tmp/fcgi, for example: > >-F /tmp/fcgi/zope > >Then in the apache config, the FastCgiExternalServer line should look >like, > >FastCgiExternalServer /usr/local/www/htdocs/z -socket zope -pass-header >Authorization > >This is because the fastcgi module defaults to look into /tmp/fcgi and >does not accept an absolute path on the ExternalServer command. >Hopefully this helps you, if not email me back.

1 0