June 2000 - Zope - Zope lists

Validating page entry help
by Stuart Foster 22 Jun '00

22 Jun '00

I was wondering what the best way to validate a users input on a page. Currently I submit a page to an interim page that checks for certain values using dtml-if's and dtml-unless'. If everything is fine I go on to the next page. If something is missing I need to go back, I haven't figured out how to do this part. If I use <META HTTP-EQUIV="refresh" content=5;URL=<dtml-var "REQUEST['HTTP_REFERER']">> all the input is lost from the form. So my questions are: 1. What is the best way to do page validation before it is submited. 2. If the way I am doing it seems to be an ok way, how do I go BACK with out losing everything (equivalent of pressing the back button) Stuart Foster MediServe Information Systems > http://www.mediserve.com >

3 2

Zope security alert and 2.1.7 update [*important*]
by Brian Lloyd 22 Jun '00

22 Jun '00

Hello all, We have recently become aware of an important security issue that affects all released Zope versions including the recent 2.2 beta 1 release. The issue involves an inadequately protected method in one of the base classes in the DocumentTemplate package that could allow the contents of DTMLDocuments or DTMLMethods to be changed remotely or through DTML code without forcing proper user authorization. A Zope 2.1.7 release has been made that resolves this issue for Zope 2.1.x users. This release is available from Zope.org: http://www.zope.org/Products/Zope/2.1.7/ A patch is also available if it is not feasible to update your Zope installation at this time (the patch is based on 2.1.6): http://www.zope.org/Products/Zope/2.1.7/DT_String.diff If you are evaluating any of the recent 2.2 alpha or beta releases, you should apply the patch noted above if your site is accessible by untrusted clients. A forthcoming 2.2 beta 2 release will contain the fix for this issue. While we know of no instances of this issue being used to exploit a site, we *highly* recommend that any Zope site that is accessible by untrusted clients take the appropriate mitigation steps immediately. Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

8 11

Zope in the UK
by peter be 22 Jun '00

22 Jun '00

Hello Britts! I live and work in London as a webdeveloper, but I haven't had a chance to stuck me teeth to some Z work here yet. Are there no Zope developers in the UK, and especially in London where I live? If you know about how Zoped UK (London) is on Zope, please let me know. Best Regards, Peter

2 1

Re: [Zope] Newbie CGI question
by Dieter Maurer 22 Jun '00

22 Jun '00

jholland(a)gears.linuxave.net writes: > How can I access the variables passed into a DTML called as a Form by > another DTML? it has the usual ?x=1&y=2 ... stuff - I'd really like to loo > through these. Usually, between DTML1 (creating the form) and DTML2 (accessing the form content) is the WWW browser. I assume this familiar setup (tell me, in case I am wrong): you find the form content in the dictionary "REQUEST.form". Its content is automatically imported in the DTML namespace. Thus, you can simply access it like DTML variables (e.g. <dtml-var x>). If there are other variables with the same name, you could use something like: <dtml-call "REQUEST['x']"> or even <dtml-call "REQUEST.form['x']"> > Also can I construct a string and then evaluate it? ie > > varname="therealvar" + "name" > > <some sort of eval> varname You have restricted evaluation capabilities: <dtml-var "expression"> e.g. <dtml-var "x+y"> computes "x + y" <dtml-var "_[name]"> renders the DTML var whose name is given by the variable "name". <dtml-var "REQUEST[name]"> look up the REQUEST variable whose name is given by "name". You should read the DTML User Guide (--> zope.org->Documentation) to learn more. Dieter

1 0

Re: [Zope] Connect String for mysql with SQLRELAY
by Roman Milner 22 Jun '00

22 Jun '00

You will need to have a sqlrelay server running somewhere that is connected to your mysql database. A given sqlrelay server running on a given port will only be connected to one database - so the informaiton below is all that is needed by the sqlrelay adapter. The sqlrelay xml config file (usually /usr/local/firstworks/etc/sqlrelay.conf) is where you will configure what database you want to connect to and what the mysql auth info is. ^Roman >>>>> "HK" == Harald Koschinski <Harald(a)koschinski.com> writes: HK> Hallo, does anybody know how to connect to a mysql database HK> with SQLRELAY (the brand new adapter?) The form-help says: HK> The connection string used for Z SQLRleay Database Connections HK> are as follows: HK> hostname portnumber username password HK> but that�s not enough - where is the Database connecting to.

1 0

Re: help!
by Jephte CLAIN 22 Jun '00

22 Jun '00

"Eden, Matthew" wrote: > I am having some trouble with the jcNTUserFolder. The NT security is in > place, and when I link to the Zope management screens in I can get to them. so far so good > But the screens are not correct. The right frame of the management screen > does not have the existing objects list, but only the Welcome to Zope > content screen. Is your zope server working standalone or is it behind IIS? Is your NT version 4.0 SP6? If not, what version is your NT server / SP ? I'm looking for the explanation for that problem, and I think it is SP6 fault. You might help me to nail down the problem > When I go to the user folder the users' names (with the > exception of the administrator user) are not listed in the canonical form. > I wonder if that is the problem? Local users are not listed in the cannonical form. the administrator user is special and is always listed in cannonical form. but this is just presentation. the logic is the same. > There is no way to add new users except through the nt security module. > Must I input new users in the nt security module with user names > like "DOMAIN\userid"? you add users the normal way, with nt user manager. jcNTUserFolder hooks into the nt security module to get users. That way, you can get all the users you have defined under NT without the need to create them again under Zope. regards, jephte clain minf7(a)educ.univ-reunion.fr

1 0

Newspaper site
by Wesley Anderson 22 Jun '00

22 Jun '00

Hi all, I'm just wondering if there are any newspaper/magazine sites out there that are using ZOPE for content management and subscriber management. I wouldn't think it would be suitable, but what do you think of using Squishdot for this purpose? Also, is there a list of "powered by" sites on zope.org? I'm doing a site that has both public and private content - hence the need for subscriber-based access. Thanks much Wesley

3 2

Confera problem reply problem
by sean＠horse101.com 22 Jun '00

22 Jun '00

I am trying to use Confera for the first time and am having a problem: 1) When I reply to a message, I get the error: Error Type: AttributeError Error Value: regs I have the topic installed in a PTK folder and have checked the option to notify me of new replies on the original message. Anyone had this problem? --Sean

1 0

dtml-tree frustration
by Pete Black 22 Jun '00

22 Jun '00

Hi there, i have a bit of a problem with the dtml-tree tag. I have a folder structure like this (excuse bad ASCII art) ---root ---Main_Sections ---Software ---Folder1 ---item 1 ---item 2 ---Folder2 ---Folder3 ---Hardware ---Folder1 ---Folder2 ---Folder3 ---TMLDiscussion ---images ---Phonelist Now, i want to have dtml-trees built for each section (Software, Hardware etc.) and have them display in the index_html method of those folders. i.e. in the index_html method of 'Software', i want a tree that looks like this: +Folder1 +item 1 +item 2 +Folder2 +Folder3 When i put this code into the index_html method of the software folder: <dtml-tree> <dtml-var id> </dtml-tree> I get nothing. No output, no errors, absolutely friggin nothing. When i put identical code into the index_html method of the Main_Sections folder, i get exactly what i would expect to see, i.e. +Software +Folder1 +item1 +item2 +Folder2 +Folder3 +Hardware +Folder1 +Folder2 +Folder3 What is going on here? Surely this *should* work!? Thanks for any help -Pete

1 0

Multiple virtual hosts and domains
by Hugo Ramos 21 Jun '00

21 Jun '00

Yellow, After testing SiteAccess for about 100 times... i still can't get zope to serve multiple virtual hosts and domains... I would like very much that someone with a successful siteaccess instalation in a real production site could get in touch with me and try to get this working. please don't tell me to read the siteaccess how-to because that didn't work. thanks ppl --- Hugo Ramos - hramos(a)zopers.org ZopersORG - http://www.zopers.org

4 3