July 2001 - Zope - Zope lists

RE: [Zope] From ColdFusion to Zope: help with <dtml-if>?
by Farrell, Troy 19 Jul '01

19 Jul '01

It sounds to me like you needs something like this in an external method: import os.path def ExternalFile(REQUEST): # Do security checks on REQUEST.filename # and REQUEST.oldfile # here if os.path.exists(REQUEST.filename) and os.path.isfile(REQUEST.filename): file = open(REQUEST.filename,'rb') elif os.path.exists(REQUEST.filename) and os.path.isfile(REQUEST.filename): file = open(REQUEST.oldfile,'rb') buffer = file.read() file.close() REQUEST.RESPONSE.setHeader('Content-Type','application/pdf') return buffer where REQUEST.filename is the current filename and REQUEST.oldfile is the previous file. Adjust the REQUEST.RESPONSE.setHeader to match your filetype. There are some _serious_ security concerns. I don't know regexps well enough, but you should definately use them to parse REQUEST.filename and ensure that when you take the path to the file from the REQUEST variable, you aren't giving away good files. If you don't take care, I can use this to get http://yourserver/ExternalFile?filename=C:\My%20Documents\Confidential.doc , or on a unix box, if Zope is running as root to run on port 80, I'll do a http://yourserver/ExternalFile?filename=/etc/passwd and http://yourserver/ExternalFile?filename=/etc/shadow . The method above is not secure. YOU COULD GET BITTEN REALLY BAD IF YOU DON'T MODIFY THE METHOD ABOVE. That said, this is more along the lines of what you want. The filenames are stored in REQUEST because that's where ZSQL methods work. Troy -----Original Message----- From: Thomas B. Passin [mailto:tpassin@mitretek.org] Sent: Thursday, July 19, 2001 8:22 AM To: Zope(a)zope.org Subject: Re: [Zope] From ColdFusion to Zope: help with <dtml-if>? [Bob Campbell] > I'm probably not explaining right, (certainly wouldn't be the first time). > She is connecting through an ODBC connection and she can run a select * and > pull up all the links for the reports. The links are hardcoded in the db. > When, for example, the Zope page is requested it runs the select all query > and presents a list with dates and report name.(for 8 banks). That works > fine.... > The the problem comes in when she has to ask if a link to a file is > available (it may or may not be) if it is then put it up, if it isn't, put > up the old file. > If the variable is known to exist but might be an empty string, you can test with a <dtml-if>: <dtml-if filevar>...</dtml-if> If the variable might or might not exist, you can look up how to check for the existence of a variable that might be known to a dtml page. If you need to check the file system to see if a named file is actually there, you need to use Python (as others have said) or install the LocalFS product (easy to do). LocalFS knows how to access the file system for you. Cheers, Tom P _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Re : Can't import a ZObjectManager instance in 2.3.3
by Didier Georgieff 19 Jul '01

19 Jul '01

Hello, As a complement to my import problem, looking at the CopySupport.py shows that it seems it fails to "Verify whether the current user is allowed to paste the passed object into self." I'm doing import as a user who is manager PLUS all roles availables (to avoid pb like local roles). And it still fails.

1 0

Can't import a ZObjectManager instance in 2.3.3
by Didier Georgieff 19 Jul '01

19 Jul '01

Hello, I have a simple ZClass derived from ObjectManager (ZObject, ZObjectManager). The ZClass contains 4 other simple ZClass. I can' t export/import any instance of the container ZClass. All objects inside the container Zclass can be exported/imported, but even an empty instance of my Container ZClass fails. I'm on 2.3.3 binary win32 but problems are reported with this same ZClass on 2.3.3 source on Linux. Products used are CookieCrumbler, NFGnav,Yihaw, EZportal Did i missed something on ZClass and Export/Import ?? Traceback is : The object p1 does not support this operation Traceback (innermost last): File D:\Zope\Zope233EzPortal\lib\python\ZPublisher\Publish.py, line 223, in publish_module File D:\Zope\Zope233EzPortal\lib\python\ZPublisher\Publish.py, line 187, in publish File D:\Zope\Zope233EzPortal\lib\python\Zope\__init__.py, line 221, in zpublisher_exception_hook (Object: ApplicationDefaultPermissions) File D:\Zope\Zope233EzPortal\lib\python\ZPublisher\Publish.py, line 171, in publish File D:\Zope\Zope233EzPortal\lib\python\ZPublisher\mapply.py, line 160, in mapply (Object: manage_importObject) File D:\Zope\Zope233EzPortal\lib\python\ZPublisher\Publish.py, line 112, in call_object (Object: manage_importObject) File D:\Zope\Zope233EzPortal\lib\python\OFS\ObjectManager.py, line 565, in manage_importObject (Object: ApplicationDefaultPermissions) File D:\Zope\Zope233EzPortal\lib\python\OFS\CopySupport.py, line 444, in _verifyObjectPaste (Object: ApplicationDefaultPermissions) Copy Error: (see above) Thanks for any pointer.

1 0

ODBC, SQL,Zope, NT4 , Jshell
by CURTIS David 19 Jul '01

19 Jul '01

Hi, I am trying to append records into an access database from Zope ZSQL. I am using the tutorial Created by jshell that was Last modified on 2000/10/13. I have his setup and it appears to be working except for the problem that no records actually get put into database. I get no errors to help me either. I have tried to using the SQL syntax Insert into customers ( customer_id, name, planet, age ) VALUES ( <dtml-sqlvar customer_id type=nb>, <dtml-sqlvar name type=nb>, <dtml-sqlvar planet type=nb optional>, <dtml-sqlvar age type=int optional> ) If I "TEST" The database connection with a select statement I get records output. YEA If I TEST the datbase connection with a delete statement - records deleted. YEA BUT If I TEST the database connection with a insert statement I get an error. No Traceback. BAD Insert into customers (customer_id, name, planet, age) VALUES ("test", "test2", "test3", 77) Note this syntax is working in MS Access. The database connection is open. Current Setup Running NT 4 with Zope versions (Zope 2.3.2 (binary release, python 1.5.2, win32-x86) Python Version 1.5.2 (#0, Jul 30 1999, 09:52:18) [MSC 32 bit (Intel)] System Platform win32 ODBC - Microsft Access Driver(*.mdb) version 4.00.5301.01 Any ideas on what to do?

1 0

RE: [Zope] hello - new to zope
by Farrell, Troy 19 Jul '01

19 Jul '01

Jerry, welcome to zope and the zope(a)zope.org mailing list. Jump right in. The best way to learn (IMNSHO) is to screw up. Build things, read other peoples code, and ask lots of questions that you may think are dumb. "If you want to be happy the rest of your life there ain't nothin' to it. Knuckle down, buckle down, do it, do it, do it." Roger Miller Troy -----Original Message----- From: Jerry Lake [mailto:jerryl@europa.com] Sent: Wednesday, July 18, 2001 6:05 PM To: zope(a)zope.org Subject: [Zope] hello - new to zope Hello, I've been instructed by my office to learn Zope. I'm in process of of going through the docs at zope.org I'm just curious as to what I can do to help me ease into it. I should clarify that I don't have a strong programming background most of what I know is PHP (and that's not a lot) if anyone has any advise to give, I'd appreciate it. Especially concerning issues like using zope remotely with apache and MySQL vs. using it locally I'm currently running it on a win98 box Thanks, Jerry Lake Interface Engineering Technician Europa Communications - http://www.europa.com Pacifier Online - http://www.pacifier.com _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Sending Zope Passwords.
by Jason C. Leach 19 Jul '01

19 Jul '01

hi, how are Zope passwords transmitted? Secure or UN-secure? j. -- ...................... ..... Jason C. Leach ..

7 8

RE: [Zope] Web Based HTML Editor
by AJDENSTONE＠BKB.com 19 Jul '01

19 Jul '01

I use this only for add content to a text property. The ActiveX manipulate only HTML 3.2. :( The file in the URL below contains only a example to use de ActiveX. My Zclass is in alpha version. []s Denstone -----Original Message----- From: Peter Bengtsson [mailto:mail@peterbe.com] Sent: quinta-feira, 19 de julho de 2001 12:18 To: AJDENSTONE(a)BKB.com; zope(a)zope.org Subject: Re: [Zope] Web Based HTML Editor I see no ZClass. Only a bunch of other files. Do you know if it can handle TAL? See what it does to a handcoded thing like this: <div tal:content="here/title"></div> > I use de DHTML Edit Control OCX from Micro$oft. Unhappyly this works only >with IE 5.x, but it is tottaly customizable. I made a Zclass that work >in my > intranet. > http://discovirtual.uol.com.br/alex.denstone/Compartilhada/DHTML%20Edit.zip

1 0

RE: [Zope] VHM Behavior
by Farrell, Troy 19 Jul '01

19 Jul '01

Should work. I've nevertried it, but from what I understand, VHM takes care of the BASE and PATH variables for you. This looks like a straightforward application of Virtual hosting. Troy -----Original Message----- From: Tim Cook [mailto:twcook@iswt.com] Sent: Thursday, July 19, 2001 11:11 AM To: Zope List Subject: [Zope] VHM Behavior I have an application that I intended to be installed off of the Zope root. In several places in this application there are calls to the BASEx paths in the REQUEST mapping, ie. <dtml-var BASE0>/subfolder1/method2 etc. I have been asked to setup a test facility where there will have multiple instances of this application. Root | --Office1 -- FreePM | --Office2 -- FreePM | --Office3 -- FreePM | --Office4 -- FreePM Can I use Apache (for SSL frontend) and VHM to get: http://office1.mytestsite.com/FreePM http://office2.mytestsite.com/FreePM http://office3.mytestsite.com/FreePM http://office4.mytestsite.com/FreePM without breaking the internal behavior of the application instances? Thanks, -- Tim Cook, President - Free Practice Management, Inc. http://www.FreePM.com Office: (731) 884-4126 ONLINE DEMO: http://www.freepm.org:8080/FreePM _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

VHM Behavior
by Tim Cook 19 Jul '01

19 Jul '01

I have an application that I intended to be installed off of the Zope root. In several places in this application there are calls to the BASEx paths in the REQUEST mapping, ie. <dtml-var BASE0>/subfolder1/method2 etc. I have been asked to setup a test facility where there will have multiple instances of this application. Root | --Office1 -- FreePM | --Office2 -- FreePM | --Office3 -- FreePM | --Office4 -- FreePM Can I use Apache (for SSL frontend) and VHM to get: http://office1.mytestsite.com/FreePM http://office2.mytestsite.com/FreePM http://office3.mytestsite.com/FreePM http://office4.mytestsite.com/FreePM without breaking the internal behavior of the application instances? Thanks, -- Tim Cook, President - Free Practice Management, Inc. http://www.FreePM.com Office: (731) 884-4126 ONLINE DEMO: http://www.freepm.org:8080/FreePM

1 0

Structured Text source code tweaking
by paul_s_johnson＠urscorp.com 19 Jul '01

19 Jul '01

I am creating a method of storing capsule resumes of site users. I am storing it in MySQL in structured text format and am allowing users to edit their resumes in place on the site. Many of the capsule resumes contain paragraphs commencing with "Mr. " or "Ms." as in "Mr. Blow solved world hunger". When Zope renders this into HTML it interprets it as a list item <LI> in an ordered list <OL> - an undesired result. Is there any way to edit the source code of StructuredText.py to except out paragraphs beginning with abbreviated titles? I've been poking around in the source code. I know regular expressions fairly well from Perl and have been searching for clues. However, I am not fluent in Python in an object oriented context. Can anyone enlighten me here? -PSJ

1 0