February 2001 - Zope

Cookies vs. browsers and other issues
by Sreeram Ramachandran 26 Feb '01

26 Feb '01

Hi, I am using LoginManager with Basic Cookie Authentication (using Zope 2.3.1b1). When I successfully login, I expect the browser to receive a cookie, right? Now, the problem is this: Netscape 4.76 on Linux and Links 0.82 on Linux don't pick up the cookie. Whereas, Lynx 2.8.3 on Linux and IE 5.something on Windows 2000 do pick it up. Has anyone experienced this? On similar/other browsers/platforms? Do you know why this is happening? I don't suspect there is any browser-specific code in LoginManager or HTTPResponse.py, so the problem can't be with Zope (maybe I'm wrong). Also, I can see the cookie quite clearly when I do a raw telnet to port 80 and submit my login form. I checked the format of the cookie received (using the telnet) and everything seems fine, like so: Set-Cookie: cookie_name="cookie_value"; Domain=my.domain; Path=/ (Changing the capitalization of Domain or Path has no effect). Meanwhile, here are some other observations: 1. I got burnt because of the implicit assumptions about how to render code found within a <dtml-raise> block. Zope assumes that anything that doesn't begin with a "<html>" or "<!doctype" is a fragment and so wraps its error message headers around it. My HTML used to start with "<?xml?>", so for a long time, I couldn't understand why my login-form wasn't working. 2. I am new to Zope, so maybe I don't quite appreciate how this works, but I was worried to read in the Zope Book that acquisition works based on the URL and not just the folder hierarchy. I.e., given a directory structure like this: ../ ..|-> gnu/ ..|...|-> rms ..|-> osi/ ......|-> esr Zope is quite happy with a URL like: /gnu/osi/esr/rms. Doesn't this have serious implications for security (i.e., one can call arbitrary dtml methods on arbitrary objects)? For example, if you do a "<dtml-var some_method>" carelessly (e.g.: implicitly assuming that some_method will only come from the same folder or one higher up towards the root), then you could be fried if someone puts an incompatible/malicious some_method elsewhere in the document tree, and then uses it in the URL? And oh, Zope is awesome! Thanks to each and everyone of you (for coding, submitting bugs, documenting, writing great extensions/products, helping newbies (like me!) or even just plain hanging around here on the mailing lists)!!! Thanks! Sreeram. -- ---------------------------------- Observation is the essence of art. ----------------------------------

2 2

List-admin problems
by Sreeram Ramachandran 26 Feb '01

26 Feb '01

Hi, Could the concerned people do something about these: 1. I got bumped off the zope(a)zope.org list for no apparent reason. I was subscribed on a "digest-only" basis, and suddenly I stopped receiving them. Anyhow, I resubscribed. Maybe the majordomo software got hosed? 2. The list archive at http://lists.zope.org/pipermail/zope/2001-February/ has got incorrect "hrefs" for all messages after 125791.html (about half- way down the page, as of this writing). My apologies for the bad formatting in my previous (and first) post here on the mailing lists. Cheers! Sreeram. PS: What is the correct email address to which such list-admin problems should be sent? -- ---------------------------------- Observation is the essence of art. ----------------------------------

2 1

Frustrated with ALL zcommerce solutions!
by James Sintz 26 Feb '01

26 Feb '01

After 2 months of struggling with Etailer, EMarket, and ZCommerce I give up! I busted my butt trying to get Etailer up and running only to be told by Adroit that they are no longer supporting Etailer in favor of a commercial app coming out in June (too far away for me). This, after asking a few tough questions about Wampum and offering to pay for help. EMarket is a whole other monster I have fought with for way too long as well. Steve has done a great job and has been very helpful, but still, trying to create even the simplest of stores has eluded me. The whole EMarket experience is like trying to put a puzzle together where someone has mixed pieces from an old puzzle in with the new puzzle and the reference photo is missing. ZCommerce, as simple as it seems, doesn't make any since either. Without the demo store I am clueless where to even start. If I install the demo store and then attempt to view the index_html page my Zope2.2.5 on Linux goes to 95% cpu and locks-up (yes I have a sessionstorage table in my gadfly database). Unfortunately, I'm not a programmer and the site I want the store for is a volunteer effort I work on in my spare time. This post is not meant to start the "if you want a canned app. then pay for a canned app." argument. I'm fully aware that every one of these products is worked on as time allows and are all being offered to help further Zope and eCommerce development. I don't expect anything, but I sure do HOPE :-) If anyone has created a simple store/shopping card that allows for secure processing of orders (and maybe a Wampum hook) and possible product images and would be willing to share the code, I would be willing to try and rustle up some cash (not sure how much). Thanks!!!! Jamey

4 4

empty lines property value
by zope＠concision.com 26 Feb '01

26 Feb '01

I just noticed that a property of type "lines", when created via the management interface (if not by other means as well) has as its initial value ['']. I would have expected an empty "lines" property to have the value []. Does anyone know the rationale behind this? Or should it be considered a bug? I see this behavior in both of the versions of Zope that we run locally -- 2.2.4 and 2.3.1b1.

1 0

LoginManager
by marco 26 Feb '01

26 Feb '01

hy there, i would like to install the LoginManager, but the make for DynPersist-module breaks with the following error: gcc -fPIC -I../../ZODB -I../../../Components/ExtensionClass -g -O2 -I/usr/include/python1.5 -I/usr/include/python1.5 -DHAVE_CONFIG_H -c ./DynPersist.c In file included from ./DynPersist.c:1: ../../ZODB/cPersistence.h:89: ExtensionClass.h: No such file or directory make: *** [DynPersist.o] Error 1 can anybody help me? bye marco

2 1

ZCatalog
by Sebastian Kapp 26 Feb '01

26 Feb '01

Hej, hej! I want to do a search with a ZCatalog, and there are some ANDs and ORs needed. Can I implement them in dtml or do I need to write that in Python? In the Zope tutorial, the only described way is a Python example. Is it possible to say something like <dtml-in expr="Catalog(['topic','old'] or ['region','east'])"> or are all ORs and ANDs bound to Python? Thanx a lot in advance!

1 0

Passing a list using hidden form fields
by Salvatore Sciacco 26 Feb '01

26 Feb '01

Hello, I have a form wich collect several rows of info at once using the :records input modifier: <FORM action="checkout" method="POST" <input type="hidden" name="ordine.codice:records" value="&dtml.missing-codprod;"> <input type="hidden" name="ordine.descrbreve:records" value="&dtml.missing-descrbreve;"> <input type="hidden" name="ordine.costo:float:records" value="&dtml-costo;"> <input type="text" name="ordine.qty:int:records" size="2" value="0"> The method checkout receive the list ordine correctly and can process it in a <dtml-in> statement. Then I need to pass the same list to another method using a hidden field. I put: <input type="hidden" name="ordine" value="&dtml-ordine;"> I've also tried: <input type="hidden" name="ordine:records" value="[&dtml-ordine;]"> but the list is converter to string. What is the rigth method to pass a list through a hidden field? Thank you in advance -- Best regards, Salvatore Sciacco mailto:sas@prometeus.net

2 2

LocalFS
by Rubinstein Fredrik 26 Feb '01

26 Feb '01

Hi there. The following piece of code works like a dream. <UL> <dtml-in read_meeting_dokument_tab> <dtml-in "fil_struktur.fileValues()"> <LI><a href="<dtml-var expr="fil_struktur.basepath">/"> <dtml-var dokument_namn></a></TD> </dtml-in> </dtml-in> </UL> Which creates an table with clickable items for download However ( This is what I want to do ) <UL> <dtml-in read_meeting_dokument_tab> <dtml-in "fil_struktur.fileValues([fil_namn])"> <LI><a href="<dtml-var expr="fil_struktur.basepath">/"> <dtml-var dokument_namn></a></TD> </dtml-in> </dtml-in> </UL> This creates an table with non-clickable objects. If you hold the pointer over the object on the webpage one can see in the lower left corner "file://server/folder/filename.doc%20%20%20%20%20. Where does the %20%20 come from. How do I get rid of that garbage. With kind regards. Fredrik.

1 0

ZClass export/import vs Distribution package
by Dominique.Dutoit＠cec.eu.int 26 Feb '01

26 Feb '01

I got some serious problems when trying to import an exported ZClass. I have enhanced a ZClass by editing some part of the propertysheets and moving around some methods. I though that the most straight way was to import the ZClass from my development server to the production server. - But when I tried to edit an previously created object depending on my ZClass, I get the old behaviour of my ZClass. - When I tried to restart the production server, I got corrupted data in the products folder. I gave it up and restored my backup. Today, I have tried to make a distribution package and I put it in the lib/python/products folder of my production server. I deleted the previous version of my ZClass through the Control Panel and I restarted Zope. And then everything goes right. So, is it definitly better to work with distribution package of ZClass instead of importing the same ZClass?

1 0

manage_workspace redirected to index_html
by Dan Connolly 26 Feb '01

26 Feb '01

I've tried to install zope twice recently; both times, I've follwed the directions up to the point where you're supposed to get the management view of the root folder. I get the contents of index_html in the frame on the right. Turns out the manage_workspace is getting redirected for some reason: connolly@shoal:~/DIST$ wget http://tux.w3.org:5500/manage_workspace --01:23:23-- http://tux.w3.org:5500/manage_workspace => `manage_workspace' Connecting to tux.w3.org:5500... connected! HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://tux.w3.org:5500/index_html [following] --01:23:24-- http://tux.w3.org:5500/index_html => `index_html.1' Connecting to tux.w3.org:5500... connected! HTTP request sent, awaiting response... 200 OK I've been following directions from the Zope Book, esp chapter 2. http://www.zope.org/Members/michel/ZB/UsingZope.dtml I also checked http://www.zope.org/Members/hgebel/HowTo/FirstZope when I download the zope 2.3.0 source and build it per the\ instructions, the second screenshot in http://www.zope.org/Members/hgebel/HowTo/FirstZope is *not* what I see. help? clues? -- Dan Connolly, W3C http://www.w3.org/People/Connolly/

3 2