May 2001 - Zope - Zope lists

How do you do a simple relocate?
by Tommy Johnson 01 May '01

01 May '01

Ok, first of all - I'm new to Zope (1 week). Now, what I'm trying to do is relocate from one page to another. Something very simple, such as if a user comes to a certain page, based on some variable, the user will be relocated to another page. I can do a server side include, but this really isn't what I wanted. Any help would be appreciated. Thanks in advance, Tommy _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com

4 3

RE: [Zope] Zope Data Access Flaw?
by Randall F. Kern 01 May '01

01 May '01

BTW, this is fixed recent builds (like 2.3.1) -Randy > -----Original Message----- > From: Casey Duncan [mailto:cduncan@kaivo.com] > Sent: Tuesday, May 01, 2001 2:53 PM > To: Brian Withun > Cc: Zope mailing list > Subject: Re: [Zope] Zope Data Access Flaw? > > > Brian Withun wrote: > > > > I am using 2.1.4 (linux), and have stumbled across this > little quirk... > > > > Create a ZSQL Method as follows: > > > > ================ > > SELECT <dtml-var "_.whrandom.randint(1000,9999)"> AS random_value > > ================ > > > > (Our ZSQL Method is connected to Sybase, but this works on > MySQL as well) > > > > Then, simply test the ZSQL Method. > > > > Here's what I get: > > > > Random value > > ---------------- > > 2754 > > > > SQL used: > > select 7684 as random_value > > > > 2754 is clearly not the same as 7684. > > > > This is quite repeatable, with different random numbers each time. > > This works as expected if I replace the whrandom call with > a constant, > > but I can't imagine how whrandom can be the culprit. > > > > Brián Withun > > This is happening because Zope replays the method when it displays the > SQL after testing it. So, randint is being called twice. Once to send > the SQL code to the database and once more to display it on > the screen. > > -- > | Casey Duncan > | Kaivo, Inc. > | cduncan(a)kaivo.com > `------------------> > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

Zope Data Access Flaw?
by Brian Withun 01 May '01

01 May '01

I am using 2.1.4 (linux), and have stumbled across this little quirk... Create a ZSQL Method as follows: ================ SELECT <dtml-var "_.whrandom.randint(1000,9999)"> AS random_value ================ (Our ZSQL Method is connected to Sybase, but this works on MySQL as well) Then, simply test the ZSQL Method. Here's what I get: Random value ---------------- 2754 SQL used: select 7684 as random_value 2754 is clearly not the same as 7684. This is quite repeatable, with different random numbers each time. This works as expected if I replace the whrandom call with a constant, but I can't imagine how whrandom can be the culprit. Brián Withun

2 1

RE: [Zope] executing dynamically generated code (eval)?
by Menard.Jean-Francois＠hydro.qc.ca 01 May '01

01 May '01

Try: <dtml-var "_[something]"> -----Message d'origine----- De : Marcus Schopen [mailto:marcus.schopen@uni-bielefeld.de] Envoyé : mardi 1 mai 2001 16:16 À : zope(a)zope.org Objet : [Zope] executing dynamically generated code (eval)? Hi there, is there a kind of dtml-eval command? I'd like to execute dynamicly generated code like: <dtml-var <dtml-var someting>>. Thank you Marcus _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Zope IOError messages
by Jérôme Loisel 01 May '01

01 May '01

Hello! After working on my website for a few hours, I sometimes start getting IOErrors from Zope in stupid_log_write. See the full message here: http://zope.levinux.org/ioerror.html This only happens when editing the site. Upon encountering this error once, all subsequent attempts at modifying the site (or even restarting Zope from the control panel) fail with the same error. Simply viewing the site, however, will continue working. This problem is does not crop up constantly, but it is not rare either. I work full-time on the website, and this IOError happens a few times a week. It seems to be happening more recently. (Maybe I should pack my database?) I would like to know why this happens and whether or not I can do something about it. The site is meant to be dynamic user-editable. I can manually restart the Zope server, but my users cannot. So this could easily turn into a big headache if the problem persists. Thank you very much in advance. Cheers, Jérôme Loisel -- Jérôme Loisel, étudiant et webmestre Lévinux: GNU/Linux pour la communauté http://www.levinux.org/

4 7

Stupid WEBDAV question
by Darin Lee 01 May '01

01 May '01

Zopatistas, Please forgive my "thickness" on this question. I have been trying to do editing via WEBDAV for quite some time and have never gotten it to work. If I use IE 5.5, select Open (as webfolder) with "localhost:8080" as the location - I can see the Zope root folder files - but I can never edit or save (if I do open the document for editing, it's a local read-only copy). It's almost as though I am opening the folder as "anonymous user" - with the Zope "view" permission only. I am working on Windows 2000 Professional - with an instance of Zope/Medusa running locally. So, how does Zope know who I am when I access via WEBDAV? Is it using my Windows credentials for authentication? Thanks in advance, -Darin Lee

3 2

Re: [Zope] Copy & Paste CatalogAware Zclass
by Dieter Maurer 01 May '01

01 May '01

Mark N. Gibson writes: > I have a folderish object containing other CatalogAware Zclasses. When > I try to copy and paste, I get the following error: > > (Using Zope 2.3.1) > > Error Type: KeyError > Error Value: SERVER_URL What a strange traceback with intermingled "2.3"/"2.2" file references. Maybe, your problem will disappear with a "clean" Zope install? > <!-- > ... > line 223, in publish_module > File /usr/local/zope/LegalTree-2.3.x/lib/python/ZPublisher/Publish.py, > line 187, in publish > File /usr/local/zope/LegalTree-2.2.x/lib/python/Zope/__init__.py, line > 221, in zpublisher_exception_hook > (Object: Traversable) > ... Dieter

1 0

Re: [Zope] XML-RPC over SSL
by Dieter Maurer 01 May '01

01 May '01

Petr Knapek writes: > from M2Crypto import xmlrpclib2 > s =3D xmlrpclib2.Server("https://uid:password@host/") > raise socket.error, "nonnumeric port" > socket.error: nonnumeric port Seems that the "password@host" part has been interpreted as a port number (which it is not). May you away, when you add the port after host explicitly. s =3D xmlrpclib2.Server("https://uid:password@host:443/") If it does not help, you will need to look into the source how the host part is analysed. May need a fix .... Dieter

1 0

SECURITY alert and hotfix release
by Chris McDonough 01 May '01

01 May '01

Hello All, Dieter Maurer uncovered a potential security issue yesterday that necessitated a hotfix release. This hotfix addresses an important security issue that affects Zope versions up to and including Zope 2.3.2. The issue is related to ZClasses in that any user can visit a ZClass declaration and change the ZClass permission mappings for methods and other objects defined within the ZClass, possibly allowing for unauthorized access within the Zope instance. We *highly* recommend that any Zope site running versions of Zope up to and including 2.3.2 have this hotfix product installed to mitigate this issue. - http://www.zope.org/Products/Zope/Hotfix_2001-05-01/README.txt - http://www.zope.org/Products/Zope/Hotfix_2001-05-01/Hotfix_2001-05-01.tgz

1 0

Zope and FastCGI installation
by John VanDyk 01 May '01

01 May '01

I'm trying to enter the world of Zope. I've got FreeBSD 4.3 running and I've installed the Apache port with mod_fastcgi. The reason I'd like to use Apache is that I'll have some large files (QuickTime movies) that I don't want to put into Zope. It sounded to me from reading doc/WEBSERVER.txt that fastcgi was the best way to go, as it permits Zope to run multithreaded and allows Apache to handle static files. Please correct me if I'm wrong on this. I've installed Zope 2.3.2 from source and it seems to have come up OK. I've done the modifications listed in WEBSERVER.txt and I get the message 2001-05-01T18:55:57 INFO(0) ZServer FastCGI Server (V1.0) started at Tue May 1 13:55:57 2001 IP : Port : None Socket path : /usr/local/www/Zope/fastcgisocket/fastcgi.soc when Zope starts so it seems to be ready. But when I point my browser at my.server.org/zope Apache tells me that "The server encountered an internal error or misconfiguration" and Apache's error log elaborates: [Tue May 1 14:17:01 2001] [error] [client 129.186.111.11] FastCGI: invalid (dynamic) server "/usr/local/www/data/zope": script not found or unable to stat() I think I've pretty much followed the instructions to the letter, but I must have missed something. John

1 0