February 2000 - Zope

HTML / site validation
by Stefan Hoffmeister 03 Mar '00

03 Mar '00

How should one validate the HTML produced by Zope? An external validator on the site? But that pinpoints only the problem at the macroscopic level, not at the Zope document or product (i.e. microscopic) level? I would like to validate individual Zope documents. The problem I mainly have is that Tidy doesn't know the DTML markup - meaning that I cannot use the validation and cleaning (!) services offered by Tidy on Zope "snippets" (documents, methods, ...) My interest in Zope is in modularizing a site, making it more maintainable this way - much in the same way as a source base in any OOPL is modularized into classes, I would like to accomplish the same with *content* on a web site. I do not seem to have found the key to gaining both modularity *and* robustness with Zope.

2 1

How does Zope.org site implement "Printable Page" option
by Robert Geiger 02 Mar '00

02 Mar '00

How does Zope.org site implement "Printable Page" option I see the pp=1 and presume this is some kind of var. I have reason to want to do this, and I kindof get the idea, but I would like to know how the pro's do it!! Thanks -- Robert Geiger robert(a)geigers.net

3 2

RE: [Zope] Options for handling concurrency?
by Martijn Pieters 02 Mar '00

02 Mar '00

> My methods are more complex than simple ZSQL lookups. I need to do a > tree traversal through a database to get the relevant items to > display. So I need to do nested SQL queries.The first Zope attempt > was ; > > <dtml-var standard_html_header> > <dtml-if child><dtml-var show_html> > <dtml-in > expr="Actors.SQL.get_children(parent=child)"><dtml-var show_html> > <dtml-in > expr="Actors.SQL.get_children(parent=child)"><dtml-var show_html> > <dtml-in > expr="Actors.SQL.get_children(parent=child)"><dtml-var show_html> > <dtml-in expr="Actors.SQL.get_children(parent=child)"><dtml-var > show_html></dtml-in get_children L4></dtml-in get_children > L3></dtml-in get_children L2></dtml-in get_children L1> > <dtml-else> > <form action='cascade2' method=post> > child <input type=text name=child size=10> > </form> > </dtml-if> > <dtml-var standard_html_footer> > > That is, it's a nested loop of ZSQL methods and show_html is an > external method that displays HTML dependant on the contents of a > DTML document in the ZODB (this is *so* cool - I can change the look > and feel of 'elements' with triviality...) > It took about 27 seconds to render a (120k) document. > > Using a full External Method solution, with calls to DBH.query (and a > one-time lookup for all the DTML 'templates' in the ZODB) it took > about 2 seconds (it's not completely debugged though! :). > > So, I'm *not* calling ZSQL methods from an External method, I'm using > direct connections to the database using Python libraries. Obviously, > I lose a lot of Zope goodies here, but I really need that speedup... So, if I understand you correctly, your EM's call query on the DA object itself, not using the ZSQL Methods. Then you have no cache whatsoever on those queries. Is there no way you can use a ZSQL Method here anyway? Just a self.nameOfZSQLMethod(arguments) might speed things up here. Also, I don't know how your recursive query will work within the one thread of a HTTP request. What python libraries do you use? -- Martijn Pieters, Software Engineer | Digital Creations http://www.digicool.com | Creators of Zope http://www.zope.org | mailto:mj@digicool.com ICQ: 4532236 | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 -------------------------------------------

2 1

Should I go with Zope?
by Eric Walstad 02 Mar '00

02 Mar '00

To the folks on the Zope(a)zope.org mailing list... I've been trying out Zope on CodeIt's free 2 week trial and my trial is about over. I have no experience with Zope prior to this trial account. I went through the Zope Content Manager's tutorials and have tried to research it thoroughly. We are starting a new web application project and are looking for a stable, scalable platform that will be around and popular/supported for a long time. However, my business partner has brought up some really good questions about our becoming Zope-centric. These are questions that I don't have answers for and was hoping that some of you might be able to answer. 1. It appears that Zope offers little or no support for more tried and true technologies such as Perl and basic CGI. Is this the case? How does one interface with our existing Perl and C++ CGI's? 2. With no basic HTML back up, what if Zope goes down? 3. What is the limit of traffic Zope can serve at once? Can users access the applications reliably, repeatedly? As our 2 week free trial is coming to an end, we need to make a decision about whether to stick with Zope or go with a more universally accepted technology. If you would, please let me know what you think about these issues. Thanks!! __________________________________________________ Do You Yahoo!? Talk to your friends online with Yahoo! Messenger. http://im.yahoo.com

6 6

zGold?
by Lucas Vogel 01 Mar '00

01 Mar '00

Why isn't zGold published at the zope.org site like the rest of the products? Is it still usable? Can someone send me a copy, since the site that hosts zGold won't come up? Thanks -- Lucas Vogel lucas7(a)home.com ICQ: 44697169

2 1

Necraft Survey Zope Sites
by J. Atwood 01 Mar '00

01 Mar '00

First time I have seen this list... http://www.netcraft.com/Survey/Reports/0002/byserver/Zope/ and click on "com" or go to.. http://www.netcraft.com/Survey/Reports/0002/byserver/Zope/com.html A few surprises.. http://www.toyota-motorsports.com/ http://homemortgageusa.com/ And a few not even there?? JMA

3 2

Multiple Processes
by David Binger 01 Mar '00

01 Mar '00

What prevents id collisions in Zope? It looks like the the ObjectManager.py code checks to see if the id is taken, and then it reserves the id. Is there a danger that 2 processes/threads (z2.py -t 4?) could both check and reserve the same id? Is there something in Zope that prevents this (improbable, but perhaps possible) problem? Is there certain way to find an object id that is not taken?

3 2

Siteaccess problems
by Stefan Langerman 01 Mar '00

01 Mar '00

Hi, I've had a couple of problems with SiteAccess. The first one appeared when I tried the sample code from the doc: <dtml-unless "REQUEST.path[0][:6]=='manage'"> ... This Access Rule is placed in some directory foo. If I try to access http://my.site.org/foo I get: Error Type: IndexError Error Value: list index out of range If I try http://my.site.org/foo/bar, there is no such problem. The second problem is the following: I am trying to set up siteaccess so that it checks for user authentification, and redirects to a login screen if necessary. That way, I am sure all authentification is cookie-based, and I don't get the ugly error page in case of failure. So I tried: <dtml-unless "REQUEST.path[0][:6]=='manage'"> <dtml-unless "AUTHENTICATED_USER.has_role('Member')"> redirect to login screen </dtml-unless> </dtml-unless> But then I get: Error Type: KeyError Error Value: AUTHENTICATED_USER Which is weird, because if I try to render the method normally, it works. I tried replacing <dtml-unless "AUTHENTICATED_USER.has_role('Member')"> by <dtml-unless "AUTHENTICATED_USER"> And I get the same result. Last thing, I would like to be able to set the path to the login screen ('foo/login'). What is the most elegant way of doing that? I seem to also have permission problems when accessing methods like absolute_url() in the Access Rule. This might be related to the previous problem. Thanks a lot, Stefan.

2 1

I got it!
by glyph＠twistedmatrix.com 01 Mar '00

01 Mar '00

After much struggling ... the docs REALLY REALLY must be improved ... I finally understood what zope was for yesterday, in a spectactular epiphany! After installing PyGreSQL and mucking about with some dtml-in statements, I am hooked. Addicted. Zope is The Only Way To Web... (I think I'll be keeping my personal website outside of it, but mainly because I *want* my personal website to be crufty and poorly designed... that's what makes it personal ^_^) However, this new rush of excitement was tempered by the realization that I probably couldn't use it for the distributed authoring purposes that I had hoped I could. Security is a HUGE concern for me: students from college campuses log in to my server, and many of them are on networks where sniffers are running. This is not a random paranoid raving, either: our server has been attacked three times in the past six months. The attacks succeeded the first time, but we have since wised up and insisted that everyone connect over SSH only, no telnet, and Debian keeps us up-to-date on security fixes. A few questions: * Is there any way to secure the authentication process that Zope has, on the wire? * Can this be done internally to ZServer? If not, I have had some problems connecting over the Apache thing to the management interface. I hope that this is resolvable. (Debian Apache/Zope users?) Anyway, now that I know what's going on ... zope is AMAZING. I can't believe how easy it is to set up complex database-oriented websites. -- ______ __ __ _____ _ _ | ____ | \_/ |_____] |_____| |_____| |_____ | | | | @ t w i s t e d m a t r i x . c o m http://www.twistedmatrix.com/~glyph/

2 5

external method problems (ARGH!)
by auto44082＠hushmail.com 29 Feb '00

29 Feb '00

Hello, I'm getting grief from an external python, method and I'm hoping that someone has some ideas that might help. Here's what I'm doing. I have a Zope product (SmartDTML) consisting of a Zclass which inherrits a DTML Document. I've heavily modified the constructor DTML Method, and among other things it calls some external python code which takes an uploaded file, converts it, and then preloads it into the DTML document via the munge() method. (I've included the code below) The external python code can be run from two places. 1. it runs automatically when you add a new instance of SmartDTML. and 2. from the Upload tab of the newly created SmartDTML instance . Well when called from the object's constructor, my external code runs and works just fine. But when called from the Upload tab, I keep getting "read-only character buffer, instance" errors out of zope. I have an indistinct feeling that it might have something to do with permissions but I don't know enough about Zope yet to know whether or not that is a valid hunch. Incidentally, this product I'm working on is a supposed to be a modified DTML Document which knows how to convert MSWord documents to HTML automatically. Here's the offending python code: #upload_file is an object property containing the uploaded file if available, #convert is a text field indicating whether or not DOC->HTML conversion should be done or not def convertFile(self): import os """Converts MSWord Documents to HTML""" if self.convert == 'YES' and self.upload_file != '': #convert upload_file to HTML f=open('./Extensions/tempfile.doc', 'w') #creat a temporary file testvar = self.upload_file f.write(testvar) f.close() #convert it os.system('wvHtml ./Extensions/tempfile.doc > ./Extensions/tempfile.html') f=open('./Extensions/tempfile.html', 'r') testvar = f.read() self.munge(testvar) f.close() os.remove('./Extensions/tempfile.doc') #clean up after ourselves os.remove('./Extensions/tempfile.html') else: #no conversion if self.upload_file == '': #no upload_file so give it a standard header & footer testvar = "<dtml-var standard_html_header>\n\ <h2><dtml-var title_or_id></h2>\n<p>\nThis is the <dtml-var id> Document.\n\ </p>\n<dtml-var standard_dtml_footer>" else: #already html, no conversion needed testvar = self.upload_file self.munge(testvar) IMPORTANT NOTICE: If you are not using HushMail, this message could have been read easily by the many people who have access to your open personal email messages. Get your FREE, totally secure email address at http://www.hushmail.com.

1 0