September 1999 - Zope

adding two ZCatalog searches
by Jay, Dylan 17 Sep '99

17 Sep '99

How about if the search result overloaded the + operator. That would add two different searches togeather making it an "or".

1 0

Newbie: Design considerations
by Chui.Tey＠env.qld.gov.au 17 Sep '99

17 Sep '99

Hi, Question 1: I have to build an application which interacts with an Oracle backend, and I wonder if anyone can suggest some pros and cons of these options: a. Protype app in Python, using the python DB-API - and then deploy with a web front end in Zope, using the object publisher to call the python methods. b. Develop Zope application using ZSQL, et c. Question 2: Is it possible to build a python app which interacts with ZSQL methods? Thanks for your comments. Chui Tey

1 0

Python Upgrading for Zope 2.0
by CURTIS David 17 Sep '99

17 Sep '99

Greetings, After download the new python(1.5.2) from the web site and installing the RedHat RPM I still get 1.5.1 listed upon firing up python from the shell. Example: Shell> python >> Python 1.5.1 Ctrl-D to exit But when I fireup Zope 2.0 and look in the control-panel it tells me that I am running 1.5.1. Do I not have Python installed correctly? Also, I see that there may be a users group in Portland OR? Does anyone know about this? DC

1 0

RE: [Zope] The logic of the _ variable (Q1959)
by picasso＠videotron.ca 17 Sep '99

17 Sep '99

> <dtml-var expr="_.render(_['x'])"> looks in > the current Document Template namespace for a > variable named 'x' and renders it fully. It works but I have never see mention of this _ method in the documentation. Is it new? Is it possible to display a list of all the attributs of the _ variable. (Something like _.keys()) >to get at with <dtml-var expr="x(_,_.None)">. I have never seen that too. Is it somewhere in the docs? I tried : <dtml-var "index_html(_,_.None)"> I got: Error Type: KeyError Error Value: standard_html_header I find it really interesting to understand the magic of these expressions. Thanks for your comments. *************************** Oscar Picasso picasso(a)videotron.ca ***************************

1 0

(no subject)
by Joel Hoffman 16 Sep '99

16 Sep '99

unsubscribe hoffmanj(a)oit.edu cdkn41a

1 1

Creating a ZInfomixDA ?
by Grant Street 16 Sep '99

16 Sep '99

Hello all I know there is a inteface from python to Informix. How do I convert this to a Zope DA ? Is there any documentation on createing a DA? Grant

1 0

The logic of the _ variable (Q1959)
by picasso＠videotron.ca 16 Sep '99

16 Sep '99

Hi, I'm trying to have a deeper understanding of the use of the _ variable, so I tried the following tests: In a folder Collection, I have two DTML Methods: 'test' and 'index_html'. test code result <dtml-var index_html> The index_html is diplayed <dtml-var "_['index_html']"> Same as previous line <dtml-var "index_html"> The code index_html is diplayed <dtml-var "PARENTS"> [[<Folder instanc...., ...] <dtml-var PARENTS> Same as previous test <dtml-var "_['PARENTS']"> Same as previous test <dtml-var PARENTS[0]> Key Error (as expected) <dtml-var "PARENTS[0]"> <Folder instance at 00B30CE0> <dtml-var "_['PARENTS'][0]"> Same as previous line <dtml-var "_['PARENTS'][0].index_html"> The code index_html is diplayed <dtml-var "PARENTS[0].index_html"> Same as previous test I would like to if there is a way to display the index_html Method (not the code) without the 'with' tag. Second question: is ther a way to access a Zope Site without worrying about the case in the URL ie: mysite/Welcome would be as mysite/WELCOME, mysite/wElCoMe and so on... and think it is important for end user comfort. Thank for your help. *************************** Oscar Picasso picasso(a)videotron.ca ***************************

3 3

BIG security hole in www.zope.org
by Andy Dustman 16 Sep '99

16 Sep '99

I found this somewhat by accident. I set up a membership and after awhile, wanted to change my index_html. Unfortunately, I didn't get a copy, so it is inheriting the one from above. So, I tried this: http://www.zope.org/Members/adustman/index_html/manage Not only does this work, it lets me make the change. Which is why it presently says, "Hey, man, if you can read this, something is seriously hosed." On the members list, and every member page with the default index_html. Probably the security is set wrong up above (I hope). -- andy dustman | programmer/analyst | comstar.net, inc. telephone: 770.485.6025 / 706.549.7689 | icq: 32922760 | pgp: 0xc72f3f1d

4 7

FYI: Site temporarily "down"
by Paul Everitt 16 Sep '99

16 Sep '99

FYI, the new Zope site has been temporarily been reverted to the old Zope site as a result of an announced security bug. Since the bug has widely reported before we could do anything about it, and since the site itself was modified with an unpleasant note, we didn't have an opportunity to make the fix in private. Thus, the URL www.zope.org currently points to the old Zope site. When the problem is fixed, we'll bring the new site back online. Though the process of reporting the bug was unfortunate, we still are happy to have received the report and investigate the problem. --Paul Paul Everitt Digital Creations paul(a)digicool.com 540.371.6909 ----------------------------------------- The Open Source Zope application server http://www.zope.org/

1 0

RE: [Zope] BIG security hole in www.zope.org
by Paul Everitt 16 Sep '99

16 Sep '99

Andy wrote: > It's way worse than I thought: You can do the same thing with at least > standard_html_footer! Hope all you Digital Creations guys haven't gone > home yet... Nope, we're here and working on it. Since this has now happened twice, I'm going to try to be more clear. Everybody, PLEASE don't mail security bugs to the mailing list. This is such an impolite thing to do that I'm surprised that I am bringing it up twice in the same month. Instead of an email with a subject line of "BIG security hole", whose contents discuss the details of the problem...doesn't it make a lot more sense to let us know about it first and have a shot at fixing it? Let us know in private and give us a shot at promptly fixing it and notifying people. If the response isn't swift, then decide whether the community at large would be best served by a direct announcement. Because the problem has now been announced, we have to bring the entire site down again like we did the last time. We'll make a separate announcement about this changeover to the old site. --Paul Paul Everitt Digital Creations paul(a)digicool.com 540.371.6909 ----------------------------------------- The Open Source Zope application server http://www.zope.org/

1 0