August 2001 - Zope - Zope lists

User-controlled report sorting with Z SQL Methods
by Andy Dustman 14 Aug '01

14 Aug '01

Suppose you have a Z SQL Method which is used for generating a tabular report, and you want to add some buttons to the headers so that clicking on a button will resort the report based on that column, either ascending or descending. You've probably seen something like this. My first impulse is to do something like this: SELECT ... <dtml-if OrderBy>ORDER BY <dtml-var OrderBy></dtml-if> This has a couple of problems: You don't want to accept just any old value of OrderBy that someone manages to submit. You probably only want to allow sorting on columns that actually have an index. Worse, a malicious user might put other bad things in there. (Since we are passing in a column name, rather than a literal value, we cannot use sql_quote.) One solution to this could be to have a method (a Python Script is probably the best match) which returns the ORDER BY clause (or an empty string) after validating the ordering column. So let's say that doOrderBy is our method that does this, and our query looks like this: SELECT ... <dtml-var doOrderBy> However, nothing stops a malicious user from passing in doOrderBy on the form, which may do Very Bad Things. But, due to the DTML namespace, the client object is always on top of REQUEST, so any passed-in doOrderBy will not be seen (unless using <dtml-with REQUEST only>). Does this sound like a reasonable solution? -- Andy Dustman PGP: 0xC72F3F1D @ .net http://dustman.net/andy I'll give spammers one bite of the apple, but they'll have to guess which bite has the razor blade in it.

3 2

Install won't start
by Lalo Castro 14 Aug '01

14 Aug '01

Hi, We're running OpenBSD 2.9 and just installed Zope 2.4. Everything seemed to install correctly, but when we attempt to start the Zope service by ./start in the Zope directory we get a few lines of error messages, that follows. " Could not find platform independent libraries <prefix> Could not find platform dependent libraries <exec_prefix> Consider setting $PYTHONHOME to <prefix>[:<exec_prefix>] 'import site' failed; use -v for traceback Traceback (most recent call last): File "/web/Zope_directory/z2.py", line 296, in ? import os, sys, getopt, string ImportError: No module name os " Has anyone gotten this error before? Is this an OpenBSD library problem? Thanks for the help, McHenry library

3 2

Help
by Todd Loomis 14 Aug '01

14 Aug '01

Hi: Anyway to control access to folders when using the <dtml-tree> tag? Thanks, Tpdd ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Todd Loomis Web Developer (SAIC) Defense Modeling & Simulation Office 1901 N. Beauregard Street, Suite 500 Alexandria, VA 22311 Office: 703.824.3407 Fax: 703.379.3778 tloomis(a)dmso.mil

1 0

RE: [Zope] Is this a feature or a bug
by Max Møller Rasmussen 14 Aug '01

14 Aug '01

Its a feature. use the "Orphan" attribute to get rid of it: <dtml-in foo size=5 start=start_point orphan=0> regards Max M > From: Kerekes Lajos [mailto:lkerekes@xperts.hu] > I use <dtml-in foo size=5 start=start_point>. > For example if the start_point=5 and the length of the foo's tuple is > 13, then > everything is ok. I get 5 item. But if the length of the > foo's tuple is > 12, then > I get all 7 item remains in the tuple. > It works wrong if the length of the remaing part of the list is lesser > than > size+size/2. > Anybody knows about it? > > Thanks. > > Lajos > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

9 10

[Ann] copyPropertySheet
by Dieter Maurer 14 Aug '01

14 Aug '01

Zope's support for PropertySheets is very weak. They cannot be renamed or copied. They can be exported but only imported if they are empty. The reason for these restrictions: The property values are not stored in the sheet but in the associated v_self (value self). The persistence mechanism, on with copying, renaming and export is based, cannot find them in the current implementation. copyPropertySheet uses the specific PropertySheet interface to handle property values correctly. You can use it to copy a PropertySheet sheet into a container container and optionally give it a different id. sheet and container can be either strings or objects. Strings are resolved into objects with restrictedTraverse. container defaults to the sheets container. Download at URL:http://www.dieter.handshake.de/pyprojects/zope Dieter

2 2

ZClass properties and Python scripts
by Gilles Lenfant 14 Aug '01

14 Aug '01

Hi, I got a ZClass that has got a property sheet "infos". "infos" has a string property "titre" How do I get/change the values of such a property from a ZClass method in Python script ? TIA, I've tried so many things that I'm brain dead. --Gilles

2 1

Re: [Zope] solaris and zope
by Alex Kelly 14 Aug '01

14 Aug '01

Sorry I don't have any insight...But I can tell you that you are not alone. We have a similar box (E-250, Dual Processor w/ 2GB of RAM running Solaris 8). My other machine I tested was a Dual PIII-800 w/ 256MB of Ram with Redhat 7.1. The RedHat box is signifcantly faster. Originally we were using FastCGI to communicate between Apache and Zope on the Solaris box. We are now using just Zserver which did make an improvement, but is no where near as fast as the Linux box. I would also be interested if anyone has any input on this subject. Thanks, Alex Kelly >>> Jason Witt <jdwitt(a)umn.edu> 08/14/01 01:51AM >>> hi, I looking for anyone who has worked with zope on solaris 8. The problem I am having is that it runs super slow. I have compiled everything from source using cc to get the 64bit optimizations. Right now I have been benchmarking against just ZServer with no Apache between. No matter what I do I cannot seem to get the install up the speed it should be on Sun a E-250 with dual processors and 2 GB of ram. What's worse is that the same site that runs so slow on solaris flys on a Linux (redhat 7.1) box. The hardware is comparable (dual 700 mhz, 2 GB ram), but the benchmarks are about 2 times faster everytime. Any ideas why Linux is so much better than solaris?? thanks, ******************************************************** * Jason Witt Java and Web Services - ADCS * * Web Developer University of Minnesota, Mpls * * Systems Administrator 190 Shepherd Laboratories * * jdwitt(a)umn.edu Ph. 612-626-8663 * ******************************************************** _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Making a Zope Product question...
by Frederic Quin 14 Aug '01

14 Aug '01

Hi all, I am trying to create a Zope Product... I have a first base Class and other classes. The other classes must be accessible and instanciate only from instances of the first base class. For example, Vocabulary objects can be everywhere in the tree. I would like Vocabulary objects to be created only inside ZCatalogs... I don't know how to do that... Thanks, Frederic Quin

3 5

Popy Problems
by Russell Hires 14 Aug '01

14 Aug '01

I'm trying, and not succeeding, to compile PoPy-2.0.6 and it won't compile (or configure, really) without mxDateTime headers...I've got the python-mxDateTime package, but not the headers...I don't get that. Can anyone help me? The exact error message is: checking for mxDateTime.h... no configure: error: PoPy needs mxDateTime headers Thanks! Russell

3 5

Re: I am getting crazy...
by Peter Bengtsson 14 Aug '01

14 Aug '01

(you're still not CC'ing the mailinglist.) Why do you name the init file __init.py? Since your traceback mentions __init__.py Does your file at all have 57 lines? If so, what's on that line? This is a SyntaxError and has little to do with Zope. It's a python problem for you and you might just have made a little typo somewhere. ----- Original Message ----- From: "Frederic Quin" <fquin(a)profile4u.com> To: <mail(a)peterbe.com> Sent: Tuesday, August 14, 2001 5:25 PM Subject: I am getting crazy... > In fact, the problem I have is very different... > Here is the __init.py of my new python product and bellow, the error message I have when Zope start up... > > > ###################################### > doc__ = 'Knowledge Definition Product.' > version__ = '1.0.0' > > import Globals > from Globals import ImageFile > > import KnowledgeDefinition > > > def initialize( context ): > """Initialize the product. This function is automatcly called by Zope at start-up. > It means for preparing and registering product in Zope""" > > context.registerClass( > KnowledgeDefinition.KnowledgeDefinition, > constructors = ( KnowledgeDefinition.manage_addKnowledgeDefinitionForm, KnowledgeDefinition.manage_addKnowledgeDefinition ), > icon='icons/KnowledgeDefinition.gif', > ) > > > ###################################### > 2001-08-14T15:17:18 ERROR(200) Zope Couldn't import Products.KnowledgeDefinition > Traceback (innermost last): > File /usr/local/Zope-2.3.2-linux2-x86/lib/python/OFS/Application.py, line 528, in import_products > (Object: string) > File /usr/local/Zope/lib/python/Products/KnowledgeDefinition/__init__.py, line 7, in ? > SyntaxError: non-default argument follows default argument (line 57) > > > >

1 0