November 2001 - Zope

zclasses, method names with trailing '%20', ftp
by Chris Price 27 Nov '01

27 Nov '01

Hi, I'm attempting to develop a product using ZClasses, and have hit a slight snag. As most of you probably know, Zope appends a trailing space ('%20') to the names/ids of methods inside of a ZClass. I have read that this is done to prevent naming conflicts, and that it only occurs inside of the Products folder. So when you instantiate a ZClass somewhere in your zope tree, the '%20's are not required in URL's and such. My problem (more of an annoyance, really) is that I have been using Emacs to edit my zope python scripts and some of my dtml methods, via FTP. It had been working great until I tried to FTP into a nested ZClass, but now the '%20's are messing up my ftp access. This is not an emacs problem, I have tried to ftp from the command line and still I cannot get to the objects. Here is a simple example of how to reproduce this problem: 1) Create a new product called 'foo'. 2) Inside the product, add a ZClass, also called 'foo'. 3) Inside of that ZClass, create another ZClass called 'bar'. 4) Inside of 'bar' (in the propertysheets/methods), add a DTML doc or any other type of object, call it 'bunk'. 5) Try to ftp into your zserver and navigate to 'bunk'. I cannot figure out a way to do it. Here is one of my ftp sessions. It is interesting to note that the ftp server accepts either 'cd bar' or 'cd "bar "', and seems to think that either is a legitimate 'directory'. but then when I try to go into the 'methods' dir, it just won't work. And this only seems to happen on nested zclasses--if I try to do 'cd "foo "' I get a "no such directory" error, as I would expect/hope. I would really prefer to edit my objects with emacs, does anyone know of any other way to do this? Thanks in advance for any advice/opinions! Chris Price cprice(a)orbik.com ftp transcript: ****************************************************************************** 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> cd Control_Panel/Products/foo 250 CWD command successful. ftp> ls 200 PORT command successful. 150 Opening ASCII mode data connection for file list d--------- 1 Zope Zope 0 Nov 27 17:44 .. drwxrwx--- 1 cprice Zope 0 Nov 27 17:44 Help ---------- 1 cprice Zope 0 Nov 27 17:45 bar_add_permission drwxrwx--- 1 Zope Zope 0 Nov 27 17:45 foo -rw-rw---- 1 cprice Zope 1463 Nov 27 17:45 foo_add -rw-rw---- 1 cprice Zope 311 Nov 27 17:45 foo_addForm ---------- 1 cprice Zope 0 Nov 27 17:45 foo_add_permission ---------- 1 cprice Zope 0 Nov 27 17:45 foo_factory 226 Transfer complete ftp> cd foo 250 CWD command successful. ftp> ls 200 PORT command successful. 150 Opening ASCII mode data connection for file list d--------- 1 cprice Zope 0 Nov 27 17:45 .. drwxrwx--- 1 Zope Zope 0 Nov 27 17:45 propertysheets 226 Transfer complete ftp> cd propertysheets/methods 250 CWD command successful. ftp> ls 200 PORT command successful. 150 Opening ASCII mode data connection for file list drwxrwx--- 1 Zope Zope 0 Nov 27 17:45 .. drwxrwx--- 1 Zope Zope 0 Nov 27 17:45 bar -rw-rw---- 1 cprice Zope 1463 Nov 27 17:45 bar_add -rw-rw---- 1 cprice Zope 311 Nov 27 17:45 bar_addForm ---------- 1 cprice Zope 0 Nov 27 17:45 bar_factory 226 Transfer complete ftp> cd bar 250 CWD command successful. ftp> ls 200 PORT command successful. 150 Opening ASCII mode data connection for file list drwxrwx--- 1 Zope Zope 0 Nov 27 17:45 .. drwxrwx--- 1 Zope Zope 0 Nov 27 17:45 propertysheets 226 Transfer complete ftp> cd propertysheets 250 CWD command successful. ftp> ls 200 PORT command successful. 150 Opening ASCII mode data connection for file list drwxrwx--- 1 Zope Zope 0 Nov 27 17:45 .. drwxrwx--- 1 Zope Zope 0 Nov 27 17:46 methods 226 Transfer complete ftp> cd methods 550 No such directory. ftp> ls methods 200 PORT command successful. 550 Could not list directory. ftp> cd ../.. 250 CWD command successful. ftp> pwd 257 "/Control_Panel/Products/foo/foo/propertysheets/methods" is the current directory. ftp> ls 200 PORT command successful. 150 Opening ASCII mode data connection for file list drwxrwx--- 1 Zope Zope 0 Nov 27 17:45 .. drwxrwx--- 1 Zope Zope 0 Nov 27 17:45 bar -rw-rw---- 1 cprice Zope 1463 Nov 27 17:45 bar_add -rw-rw---- 1 cprice Zope 311 Nov 27 17:45 bar_addForm ---------- 1 cprice Zope 0 Nov 27 17:45 bar_factory 226 Transfer complete ftp> cd "bar " 250 CWD command successful. ftp> ls 200 PORT command successful. 150 Opening ASCII mode data connection for file list drwxrwx--- 1 Zope Zope 0 Nov 27 17:45 .. drwxrwx--- 1 Zope Zope 0 Nov 27 17:45 propertysheets 226 Transfer complete ftp> cd propertysheets/methods 550 No such directory. ftp> cd propertysheets 250 CWD command successful. ftp> cd methods 550 No such directory. ftp> ls methods 200 PORT command successful. 550 Could not list directory. ftp> ls 200 PORT command successful. 150 Opening ASCII mode data connection for file list drwxrwx--- 1 Zope Zope 0 Nov 27 17:45 .. drwxrwx--- 1 Zope Zope 0 Nov 27 17:46 methods 226 Transfer complete

1 0

Re: [Zope] Multiple queries in a ZSQL method (MySQLda)
by H.de.Wit＠SFK.NL 27 Nov '01

27 Nov '01

>Is there a workaround to have those 2 SQL queries in one ZSQL method ? I use this thing: <dtml-var sql_delimiter> I see no other purpose for it than abstracting from ';', (but i don't know if this works in your configuration) Met vriendelijke groeten, Hans de Wit Stichting Farmaceutische Kengetallen Postbus 30460 2500 GL DEN HAAG Tel. 070-3737448 Fax 070-3737445

3 2

basis Zope/Python script question
by H.de.Wit＠SFK.NL 27 Nov '01

27 Nov '01

Hello, I write the following code repeatedly: if request.has_key('v1'): v1=request.v1 else: v1=-1 if request.has_key('v2'): v2=request.v2 else: v2=-1 etc. Is there a way to do this more efficient and clean, something like this: for reqvar in ['v1','v2','v3']: if request.haskey(reqvar): reqvar=request.reqvar #this doesn't work else reqvar=-1 # and this also not. Het vriendelijke groeten, Hans de Wit Stichting Farmaceutische Kengetallen Postbus 30460 2500 GL DEN HAAG Tel. 070-3737448 Fax 070-3737445

3 2

Generating thumbnails on the fly using PIL
by Pieter Claerhout 27 Nov '01

27 Nov '01

Hi all, I'm trying to make an external method that creates a thumbnail of an image on the fly. I want to give it the url of the image and return the image data. It should look something like: <dtml-var "MakeThumb('/path/to/my/image.jpg', (64, 32))"> I figured out already that I should use a StringIO object to store the raw image data in, so that PIL has an object to work with. The only two things I'm struggling with still are: - How do you get the data of the image in the StringIO object? - How do you return the thumbnail image? Hope that somebody can help with this. Cheers, Pieter

4 3

Zope port and provider
by James van der Veen 27 Nov '01

27 Nov '01

Hi all a friend of mine fired this question at me can someone help me give him a awnser? "There appears to be a serious flaw with zope: one needs a zope provider. and there aren't too many. apparently zope grabs port 80 and keeps it. is this true? are there workarounds so that any isp will do?" I know there are quite a few Providers. Hope someone can help me. Greetz, Jamez

4 3

Re: [Zope] CoreSessionTracking: Brute-Forcing Web Application Session IDs
by Frank Tegtmeyer 27 Nov '01

27 Nov '01

"Chris McDonough" <chrism(a)zope.com> writes: > OK, so do you recommend that I just use a shared secret string to > obfuscate the session id? Yes, I think that would be sufficient. The secret would be generated during creation of the SessionId manager, either by asking the user for some secret or by getting it from the system (/dev/random on Linux for example). When asking the user a long default value could provided so that the user only has to change it (seeing a good random example is easier than to create one from scratch). > I suppose I could just use the rotor module Yes, that's a possibility. > Or do you think I should use dates/times and IP addresses as part of > the string, rejecting session ids from machines that don't match the > IP address encoded into the sid and date/times that are too long > ago? I would avoid IP addresses because session users can come from different sources legally. Timestamping would be a good thing in case session Ids are kept somewhere in URLs (search engines, proxy-Logs, ...). > Note that I believe there will be some cost involved in terms of > documentation and support if this is the case. Sessions often just > won't work due to proxy server banks that prevent users from appearing > to come from the same IP address across requests. Exactly. > In any case, if anything like this goes in, this will be a feature of > a sessioning system after Zope 2.5 and will not ship with 2.5. Oh, don't feel any pressure ... it was only a suggestion, not a demand :) > Thanks Frank! Thanks too, Chris. Regards, Frank -- CTO fte(a)Lightwerk.com http://www.Lightwerk.com/ Fax: +49-2434-80 07 94 Phone: +49-2434-80 07 81 Lightwerk GmbH * An der Kull 11 * 41844 Wegberg * Germany

1 0

DLL Release
by Scheck, Herman 27 Nov '01

27 Nov '01

Hi all, My question is on releasing DLLs/threads used by external python methods in Zope (ver 2.4.1). Once a COM object (QuoteDB.dll in the following example) is accessed via an external python method (below) and the process is completed... ---------------------- import win32com.client import pythoncom def GetRFQNumbers(DSN, UID, PWD): # retrieves request for quote numbers # # arguments: DSN - data source name # UID - data source user id # PWD - data source password # returns : record tuple of rfqNumbers pythoncom.CoInitialize() QuoteDB = win32com.client.Dispatch("QuoteDB.BusinessRules") rfqNumbers = QuoteDB.GetRFQNumbers(DSN, UID, PWD) return rfqNumbers[0] ---------------------- ... the DLL becomes locked until the Zope service is shut down. Problem here is that I do not want to have to shut down the Zope service containing multiple applications just to replace/upgrade a single DLL used by a single application. Am I missing something in the python code to release the DLL/thread before returning? Or, is Zope maintaining the thread in some way? How do I programmatically kill/close the thread when it is no longer in use? Thanks, -Herman

1 0

Mods to Document Library.
by Jason C. Leach 27 Nov '01

27 Nov '01

hi, I'd like to make a small modification to Document Library: I have added a property 'document_id' to the documents. In the now I would like that property to display when I list the items (document_list, document_idem_list). Any ideas? Thanks, j. -- ...................... ..... Jason C. Leach .. PGP/GPG Public key at http://www.keyserver.net/ Key ID: 157BD48C

2 1

Use Zope internal style sheets
by Lars Heber 27 Nov '01

27 Nov '01

Hello, I'm about of building my own management screens for some ZClasses. They should totally fit the zopish outfit. Does anyone know where the used style sheets are stored? What I did to build my management screen was to have a look at the rendered HTML code of an authentic Zope management screen, use the code and replace it by DTML where necessary. Even the Paste button only appears when it should. But I don't want to insert the style sheets hard coded, or pack it into an own document, but I want to use the real Zope CSS. Where can I find it? I also started to play around with manage_tabs. I only found this object by property. Is it some kind of secret, or where can I find more of those extremely useful things (+documentation)? BTW: I recently asked how to change the headline of a self-written documentation for the Help System which is display on the Contents tab. I found that a Product Help does not have a property title. It just somehow takes the id of the product. But when this id of the product is changed, the Help remains with the old id though. How can I change this? Thanks for any suggestions. -- Lars Heber, mailto:Lars.Heber@t-systems.de T-Systems, debis Systemhaus GEI GmbH, Geschaeftsstelle Sachsen

3 2

Re: Checking if cookies enabled
by Lars Heber 27 Nov '01

27 Nov '01

Another possibility without using any JavaScript, thus independent from the JS settings of the user is: DTML method cookieTest: <dtml-call "RESPONSE.setCookie('cookiesAllowed', 'yes')"> <html><head> <meta http-equiv="refresh" content="0; URL=cookieTestComplete"> </head> <body> <a href="cookieTestComplete">Redirecting to cookieTestComplete...</a> <dtml-var standard_html_footer> DTML method cookieTestComplete: <dtml-var standard_html_header> <dtml-if "REQUEST.cookies.has_key('cookiesAllowed')"> <h1>Cookies are allowed!</h1> <dtml-else> <h1>Cookies are not allowed!</h1> </dtml-if> <dtml-call "RESPONSE.expireCookie('cookiesAllowed')"> <dtml-var standard_html_footer> Successfully tested with NS 4.78, IE 5.0. There could perhaps be problems if the users has (somehow) turned off auto-redirecting... That's why there is the link left in cookieTest. -- Lars Heber, mailto:Lars.Heber@t-systems.de T-Systems, debis Systemhaus GEI GmbH, Geschaeftsstelle Sachsen

4 4