February 2002 - Zope

Zope hangs with the help section
by Juan Garcia Garcia 27 Feb '02

27 Feb '02

Hi, my problem is that Zope hangs when i want to enter in the Help section. I installed Zope a few months ago and it worked perfectly, but since yesterday i have the problem explained before. I haven't installed or upgraded nothing in the last weeks. I have Zope 2.4.2 in Debian/woody. Has anyone seen this problem before? Thanks. Bye Juan

1 0

Security issue with the Guest book example in Zope Book
by Joakim Nicander 27 Feb '02

27 Feb '02

Hi, I'm relatively new to Zope so I hope I haven't missed anything obvious. I'm building a small project manager for an intranet site. Normally I use MySQL to store data but this time I store the information in DTML Documents as the Guest book example. Text in the document and adding properties to the document. The information is added to Zope via an input form exactly as in the example. Then rendering the document with html_qoute so the cant sneak in html code. But it doesn't stop sneaking in DTML code as I found out when I tested. Ok maybe I missed something I thought, so I implemented the guest book from the Zope book. Still no protection against DTML code. I can get information form Zope and of course crash the guest book. I can easily change my project manager to add the text in a property so it wont render. Other suggestions? But I don't think an example in the Zope book should have this security issue. I hope I missed something. /Nocke

1 0

user accounts
by Richard Hewison 27 Feb '02

27 Feb '02

This is a problem that has dogged us for ages, and this is probably the third time we've asked for help here. Basically, new users added to specific folders within Zope (via the acl_users folder) cannot login to the system. The only account that seems to work fine is the one for the 'admin' user. The most annoying thing about this is that it *did* work when we first installed Zope, but somewhere down the line it stopped. This has happened on two different servers with two different operating systems (Sun SOlaris and now Linux) and two different versions of Zope (2.4.1 and 2.4.3). It's a fairly serious problem if we want to use Zope to handle our main web site in the future. Anyone had this and solved it? Does v2.5 have this as well? Richard H.

3 3

HOWTO collection
by Tille, Andreas 27 Feb '02

27 Feb '02

Hello, I just builded Debian packages from the Zope Book and Zope Development Guide. I consider the collection of the various HOWTOs as a valuable resource which I would like to check when developing offline. Thus I would like a tar archive of the HOWTO collection which I could easily handle (or even build a Debian package from it). Is there any possibility to get all the HOWTOs in a handy format? Kind regards Andreas.

1 0

Re: [Zope] Saving files to zope using Dreamweaver?
by Paul Browning 27 Feb '02

27 Feb '02

--On 26 February 2002 19:39 -0700 Enoch Norton <enochsnorton(a)yahoo.com> wrote: > I am a really new user of Zope. In going through the Zope book I am > stumped in the following section. I seem to be missing some very > important key piece of information. I have tried to save my Dreamweaver > templates to the ../index_html/source.html. However because index_html is > not a folder the ftp client in Dreamweaver will not allow me to access > the url. I guess I don't understand how one is supposed to save a file to > a URL when the file.Save As.. option is dependent upon directories. If > anyone has some insight to offer please let me know. I have to say (and I may be missing something fundamental here) that the source.html stuff seems like a red herring. What you need to do is have Dreamweaver access the webdav_source_port (so you get the unrendered DTML or ZPT code - search the list archives for more information about this). There's a proto-HowTo on using DW at: http://lib-srvr5.lib.bris.ac.uk:20080/zpt_test/weweb/dw4zope.pt This is also part of me learning how to use ZPT and so to understand why this page looks like it does see: http://lib-srvr5.lib.bris.ac.uk:20080/zpt_test/weweb/howto.htm When I'm more confident I'm doing the right things I'll move these on to the Zope site. I've played with GoLive too. I don't like the way DW forces you to work with a local and remote site - GoLive is nicer in this respect in that it allows you to edit the remote site directly. But DW has a more intuitive interface in terms of editing pages IMHO. Now: a question of others who've been using DW or GoLive - are you doing it over SSL? Both seem broken when it comes to https URLs. I've had some success using WebDrive 5.0 over SSL (version 4 doesn't work) but _only_ with GoLive. Dreamweaver insists on changing the mime-type of any ZPT is saves via WebDrive. Amazingly even FrontPage becomes a useful and benign ZPT wysiwyg editor when used via WebDrive! Any workarounds (or suggestions of same) for the DW-WebDrive problem (or inside information about when DW or GoLive are going to support secure protocols) greatly appreciated. Paul -- The Library, Tyndall Avenue, Univ. of Bristol, Bristol, BS8 1TJ, UK E-mail: paul.browning(a)bristol.ac.uk URL: http://www.bris.ac.uk/

1 0

Where to see Zope Syntax? Book? Grepping?
by lmckusic＠specialparents.com 27 Feb '02

27 Feb '02

After starting with the Zope Book and the 2.5.0 Tutorial I want to see more formal syntax so I can write form screens and ZSQL. So far the help screens and tutorial leave me puzzled. I don't understand enough Zope design and I don't understand enough Python to grep the source. Question One is: Please recommend the best next book. I need form syntax. I need to understand Zope ZSQL syntax and examples for dump, import, backup and transactions. Question Two is: If grepping the Zope source is the best way to understand Zope, could you please show me an sample grep?

2 1

upload multiple files
by John Hunter 26 Feb '02

26 Feb '02

Is it possible to upload multiple files using a dialog box in zope, so that the user can select with a mouse several files at once and have them all uploaded into the zope file system. Alternatively, is there a way to have zope upload all the files located in a folder on the local file system? Thanks, John Hunter

3 2

dtml-let and Python Script
by Peter Bengtsson 26 Feb '02

26 Feb '02

Using DTML (This works for me but not what I want): --- DTML Method index_html --- <dtml-let age="50"> <dtml-var message> </dtml-let> ------------------------------ --- DTML Method message ------ You are <dtml-var age> years old ------------------------------ Using Python Script (this is what I want but doesn't work for me): [same index_html method as above] --- Python Script message ------ return "You are %s years old"%context.age ------------------------------ Basically, how do I within a Python Script use variables that are set in a containing DTML-Let? Peter ===== peter_bengtsson_temporary(a)yahoo.co.uk is a temporary address that I use to send until I get my email stuff together. You can always continue to send to my real address which is mail(a)peterbe.com __________________________________________________ Do You Yahoo!? Yahoo! Sports - Coverage of the 2002 Olympic Games http://sports.yahoo.com

2 1

RE: Insert Help
by Todd Loomis 26 Feb '02

26 Feb '02

Dieter: I've did this and this is what the list looks like ['1', '2', '3'], when i submit it doesn't do 1 insert for each element it just does one. this is how it comes from my from: <input type=checkbox name=options:list value=1>1 <input type=checkbox name=options:list value=2>2 <input type=checkbox name=options:list value=2>2 then my sql statement: <dtml-in options> insert into UserRoles values (<dtml-sqlvar options type=string>) <dtml-unless sequence-end><dtml-var delimiter></dtml-unless> </dtml-in> Can you make any other suggestions.... sorry for being pain just need some help! Todd At 07:21 PM 2/26/2002 +0100, you wrote: >Todd Loomis writes: > > Could you explain a little more I still seem to be trying to input > > everything all on one record. I need to break out in an array then each > > needs to be added to the database as a separate record. Maybe I missed > > something. >I can only be more specific when I know your data model. > >The explanation is already almost as specific as it can be: > > .... > > Thus, you use something like: > > > > <dtml-in options> > > insert into ... > > <dtml-unless sequence-end><dtml-var sql_delimiter></dtml-unless> > > </dtml-in> >Provided "options" contains a sequence, then you will get >one insert for each sequence element. > >The missing parts are your data model... > > >Dieter

2 1

Returning Image Data from a Product
by Terry Hancock 26 Feb '02

26 Feb '02

Hi all, I'm getting very confused about a Zope product I'm working on, and I'm hoping somebody can share a clue on this. I've already figured out that I can load an image included with my product into PIL, with a line like this (which took a long time to figure out, any better solutions to this would be appreciated, too): im = PIL.Image.open( Globals.ImageFile('www/myimg.png', globals()).path) and then, I can load a PIL image into a contained Zope Image object (I was actually figuring that Globals.ImageFile would load a Zope image, but it seems not -- weird. Instead it's some kind of file access object, hence the "path" attribute used above). imf = StringIO() im.save(imf, "PNG") imf.seek(0) self.result_image.data = imf.read() self.result_image.width = 32 self.result_image.height = 32 self.result_image.content_type='image/png' self.result_image.size = len(self.result_image.data) ("im" is the PIL image, "self.result_image" is the Zope image, and "imf" is a StringIO object containing the image). Now the part that stumps me -- how do I return this image back to the caller? Specifically: * I want to return the PNG Image (i.e. a block of data * * with mime type 'image/png'), NOT an HTML image tag * * containing a reference to result_image . * I've tried: return self.result_image which returns a serialized image tag (i.e. just like return self.result_image.tag() which I've also tried). return self.result_image.data returns the PNG image alright, but the mime type is set to 'text/plain'! The kicker is, I have a related module which does do this successfully, by simply using: return self.result_image But I can't figure out why this one doesn't do it. So I need to have a better understanding of what makes this happen in order to figure out what the deal is. There are a lot of (apparently) trivial differences between the two, but each time I come across something that looks like the critical difference, it turns out not to change anything, so it's pretty darned tedious to do the experimental approach. So I figure I could use some theoretical predictions to guide me. :) Some of the differences I've already tried: Changing the base class from SimpleItem to Image (this is the class of the containing object, not the zope image object which is initialized within it -- i.e.: class myspecial_image_maker(Image): <-- this is the superclass that I changed from SimpleItem this class is not viewable as an image, so has no particular reason to be one. def __init__(self, id, title): self.id = id self.title = title self.result_image = OFS.Image.Image( 'result_image', 'Result Image', '', content_type='image/png') Also, on my earlier class, I want to use a URL interface for caching reasons, so I overloaded __getattr__, like this: def __getattr__(self, keystr): try: # omitted lengthy code to catch my coded URLs # code like that quoted above to load/make a PIL # image and pack into the Zope result_image image. return self.result_image except: Image.__getattr__(self, keystr) (So if anything goes wrong, or my code doesn't catch the attribute, it falls through to the superclass's __getattr__ -- this is pretty nice, but also tedious to debug, I have to warn you -- if you snare up standard attributes with your __getattr__, Zope gets very confused!). I remind you that this code does what I wanted -- i.e when you point your browser at the desired "coded" URL, you get the PNG image itself, with correct 'image/png' mime type. So you can do something like this: <img src="<dtml-var expr="Avatars.anonymous_png">/s32" width="32" height="32" border="0"/> where "anonymous_png" is an object of my earlier class. The coded URL "s32" asks for a version of the image resized to 32x32, which PIL takes care of. This code *works*. Now I'm trying to do it again, calling another function to generate an image from scratch (i.e. not contained in the class), based on some rules and PIL code, generated from the coded URL. But for some reason this *doesn't* work, and I'm trying to figure out what determines this, so I can see if I can find the difference (not to mention that this sounds like I will learn something significant about Zope). As you can see, I also changed the __getattr__ to use Image and not SimpleItem. Some of my test code, in order to avoid the complexity of interacting with the __getattr__ code, returns the image from a normal python method, like this: class ... def testimg(self): "Need this docstring or zope complains ;)" # omitted code (as above) to load a PIL image and convert # to a zope image return self.result_image This returns the image *tag* every time I've tried it. Is it possible that it matters whether I'm using __getattr__ or a python method to return this? Is there some hidden difference that I just haven't found yet (perhaps completely unrelated to what I've shown). The whole module is a bit long to post on the list, and it includes a lot of trivial details that would probably hinder more than help. I'm hoping I've already included the relevant parts above. I think I've tried returning the image from the __getattr__ method (to no avail), but I've been through so many variations, I really can't remember now! BTW, the actual module size is: % wc NaryaImage.py 385 1284 11050 NaryaImage.py Thanks for any ideas! Terry -- ------------------------------------------------------ Terry Hancock hancock(a)anansispaceworks.com Anansi Spaceworks http://www.anansispaceworks.com P.O. Box 60583 Pasadena, CA 91116-6583 ------------------------------------------------------

2 2