April 2002 - Zope - Zope lists

isecure XML-RPC handling.
by Rossen Raykov 02 Apr '02

02 Apr '02

Zope is not handling correct XML-RPC request. Even the example from http://www.zope.org/Members/Amos/XML-RPC is not working. Even worst if a request like this one in the quoted example is send to the web server it will report information about the local server installation and the internal network. Included are a request and response to www.zope.org. As one may see the server is installed in /usr/local/base/Zope-2.3.2-modified/ and it rely on 10.0.11.3:1380 for request processing. All this may be useful debug information but it is not acceptable for a production server! I'm not familiar with Zope and I cannot say is it only a configuration problem or it is a problem in the code. I do not have time to investigate that but a similar result may be achieved with the distribution offered for download. Please let me know if I have to send this bug information to some one else. I would like to be informed and when this issue is resolved so I can announce it on Bug-Traq. Regards, Rossen Raykov <cut here> $ telnet www.zope.org 80 Trying 63.102.49.33... Connected to www.zope.org. Escape character is '^]'. POST /Foo/Bar/MyFolder HTTP/1.0 Content-Type: text/xml Content-length: 95 <?xml version="1.0"?> <methodCall> <methodName>objectIds</methodName> <params/> </methodCall> HTTP/1.0 500 Internal Server Error Server: Zope/Zope 2.3.2 (source release, python 1.5.2, linux2) ZServer/1.1b1 Date: Sat, 23 Mar 2002 03:09:14 GMT Bobo-Exception-File: /var/tmp/python/python-root/usr/lib/python1.5/xmllib.py Content-Type: text/html Bobo-Exception-Type: RuntimeError Bobo-Exception-Value: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd"<HTML> <HEAD <TITLE>Welcometo Zope.org</TITLE <link rel="stylesheet" href="http://10.0.11.3:1380/zope_css" type="text/css" </HEAD <BOD Content-Length: 6864 Bobo-Exception-Line: 748 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd"> <HTML> <HEAD> <TITLE>Welcome to Zope.org</TITLE> <link rel="stylesheet" href="http://10.0.11.3:1380/zope_css" type="text/css"> </HEAD> <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#000066" VLINK="#606060" TOPMARGIN="0" LEFTMARGIN="0" MARGINWIDTH="0" MARGINHEIGHT="0"> <BASEFONT FACE="Verdana, Arial, Helvetica, sans-serif" SIZE="2"> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0" > <TR> <TD WIDTH="10" BGCOLOR="#6699cc" ALIGN=CENTER> </TD> <TD COLSPAN="2" BGCOLOR="#6699CC" VALIGN="TOP" WIDTH="165"><A HREF="/"><IMGSRC="/Images/zopecom.gif" ALT="Zope" ALIGN="ABSMIDDLE" WIDTH="150" HEIGHT="63" BORDER="0"></A></TD> <TD BGCOLOR="#6699CC" VALIGN="TOP" ALIGN="RIGHT" xWIDTH="99%" CLASS="welcome"> <p class="welcome"> <a class="globalmenu" href="http://www.zope.com">Business Services</A> | <A CLASS="globalmenu" HREF="/SiteIndex/searchForm">Search</A> | <a CLASS="globalmenu" href="/Products">Download</a> | <a CLASS="globalmenu" href="/Documentation">Documentation</a> | <a CLASS="globalmenu" href="/Resources">Resources</a> | <a class="globalmenu" href="http://dev.zope.org">Development</a> <BR> <FORM ACTION="/SiteIndex/search" METHOD="GET" name="search"> Search <INPUT TYPE="text" NAME="text_content" SIZE="15">   <INPUT TYPE="IMAGE" SRC="/Images/go.gif" ALT="Go Button!" ALIGN="ABSMIDDLE" BORDER="0" WIDTH="20" HEIGHT="20"> </FORM> </p> </TD> <TD WIDTH="10" BGCOLOR="#6699CC" ALIGN="RIGHT" VALIGN="BOTTOM"><IMG SRC="/Images/blue-rounder1.gif" WIDTH="14" HEIGHT="20" BORDER="0"></TD> </TR> <TR> <TD WIDTH="10" BGCOLOR="#6699cc"> </td> <TD WIDTH="150" BGCOLOR="#6699CC" VALIGN=TOP> <H2 CLASS="lefttitle"> Guest</H2> <p class="sidemenu"> <A CLASS="sidemenu" HREF="/Register/register.html">Join Zope.org</A> <BR> <A CLASS="sidemenu" HREF="/login.html?came_from=http://10.0.11.3:1380">Log in</A> </p> <HR NOSHADE SIZE="0.5" WIDTH="95%"> <H2 CLASS="lefttitle"> Zope Exits</H2> <p class="sidemenu"> <A CLASS="sidemenu" HREF="http://dev.zope.org/">dev.zope.org</A><BR> <A CLASS="sidemenu" HREF="http://cmf.zope.org/">CMF Dogbowl</A><BR> <A CLASS="sidemenu" HREF="http://collector.zope.org/Zope">Zope Collector</A><BR> <A CLASS="sidemenu" HREF="http://cvs.zope.org/">Zope CVS</A><BR> <A CLASS="sidemenu" HREF="http://www.zopezen.org/">ZopeZen</A><BR> <A CLASS="sidemenu" HREF="http://www.zopenewbies.net/">Zope Newbies</A><BR> <a class="sidemenu" href="http://www.zopelabs.com/">Zope Labs</a><br /> <A CLASS="sidemenu" HREF="http://www.eurozope.org/">EuroZope</A><BR> <A CLASS="sidemenu" HREF="http://www.zopera.org/">Zopera</A><BR> <A CLASS="sidemenu" HREF="http://zdp.zope.org">ZDP</A><BR> <A CLASS="sidemenu" HREF="http://www.freezope.org">FreeZope</A><BR> <a CLASS="sidemenu" href="http://www.nipltd.net/Free">NIP Free Zope Hosting</a> </p> <HR NOSHADE SIZE="0.5" WIDTH="95%"> <p><a href="http://www.amazon.com/exec/obidos/ASIN/0735711372/zopeorg-20"> <img src="http://www.zope.org/Images/zopebook.png" alt="The Zope Book" height="140" width="109" border="0" /></a> </p> <p><a href="http://python.org/" alt="Python Powered!" ><img src="http://www.zope.org/Images/python.gif" border="0"></a></p> </TD> <TD COLSPAN="2" VALIGN=TOP> <table cellpadding="10" cellspacing="0" border="0" width="100%"> <tr valign="top"> <td> <TABLE BORDER="0" WIDTH="100%"> <TR> <TD WIDTH="10%" ALIGN="CENTER"> <STRONG><FONT SIZE="+6" COLOR="#77003B">!</FONT></STRONG> </TD> <TD WIDTH="90%"><BR> <FONT SIZE="+2">System Unavailable</FONT> <P>This site is currently experiencing technical difficulties. Please contact the site administrator for more information. For additional technical information, please refer to the HTML source for this page. Thank you for your patience.</P> </TD> </TR> </TABLE> <pre> Error type: RuntimeError Error value: Syntax error at line 5: bogus `<' </pre> <p align="center"> <form> <input type="button" value="More Information..." onClick='window.location = "view-source:" + window.location.href'> </form> </p> </td> </tr> </table> </TD> <TD WIDTH="10" ALIGN=CENTER> </TD> </TR> <TR><TD WIDTH="10" BGCOLOR="#6699cc"ALIGN=CENTER> </TD> <TD WIDTH="150" BGCOLOR="#6699CC" ALIGN=RIGHT VALIGN=BOTTOM><IMG SRC="/Images/blue-rounder2.gif" WIDTH="142" HEIGHT="20" BORDER="0" ALT=""></TD> <TD COLSPAN="2" ALIGN=CENTER CLASS="plain"><HR NOSHADE SIZE="0" WIDTH="95%"> <a href="/privacy.html">Privacy policy</a>       <A HREF="http://10.0.11.3:1380?pp=1">Printable Page</A>       <A HREF="/Members//feedback_form?came_from=http://10.0.11.3:1380">Feedback to this page's author</a>      <A HREF="http://10.0.11.3:1380/feedback_site_form?whats_up=Welcome%20to%20Zope. org&origin_url=http://10.0.11.3:1380">Feedback about Zope.org</A>      <A HREF="http://10.0.11.3:1380/view_source">DTML Source</A> </TD> <TD WIDTH="10" ALIGN=CENTER> </TD> </TR> <TR> <TD WIDTH="10"> </TD> <TD WIDTH="150"> <p style="font-size: 60%; color: #cfcfcf;">served by app2</p></TD> <TD WIDTH="150"> </TD> <TD> </TD> <TD WIDTH="10"> </TD> </TR> </TABLE> <P CLASS="copyright">© 2002 <a href="http://www.zope.com/">Zope Corporation</aAll rights reserved.</P> </BODY> </HTML>  Connection closed by foreign host. _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

3 2

Doing Business & Working Together: Americans & Germans
by USAforum 02 Apr '02

02 Apr '02

E-Mail zope(a)zope.org Tuesday, April 02, 2002 Special introductory offer available for our seminar Doing Business & Working Together: Americans & Germans Dear Sir or Madam: Do you and your colleagues/employees do business and/or work together with Americans and/or Germans? Do you sometimes ask yourself: * Why do they act like that (in meetings, on the phone, at fairs)? * What do they expect of me, as the manager, seller or customer? * What do they mean when they say, No problem"? * How can I effectively present and sell my product or concept? * How can we build, manage and motivate teams for success? * When will we start achieving some RESULTS? Our 2-day training seminar Doing Business & Working Together: Americans and Germans" is designed for business people from both the U.S. and Germany. Participants learn to recognize hidden cultural obstacles and understand each other better so that they can communicate successfully, learn to work together and build solid partnerships. Spaces are still available for: **** June 26 & 27, 2002 in Detroit, MI, USA **** **** September 09 & 10, 2002 in San Francisco, CA, USA **** For a detailed seminar program and our introductory offer, write your name, department, and Address in this E-Mail and send it back to info(a)usaforum.com. Sincerely, Bernd K. Zeutschel President & CEO USAforum Schlossbergstrasse 10 D-72070 Tuebingen Germany Tel. 0(1149) 7071 5597-0 Fax 0(1149) 7071 5597-30 info(a)usaforum.de www.usaforum.de AmericanEuropeanForum 2344 Perimeter Park Drive Atlanta, GA 30341 U.S.A. Tel. (00)1 770 220 2245 Fax (00)1 770 216 1654 info(a)usaforum.com www.usaforum.com

1 0

RE: [Zope] DTML editing
by Igor Leturia 02 Apr '02

02 Apr '02

I have downloaded the trial version of TextPad. I see it has HTML syntax coloring, but I can't find DTML, in the program or in their website. Igor >> Is there a Zope product for editing DTML methods that has syntax color >>highlighting? If not, are there any other standalone editors that have >>this feature (for windows)? > >Textpad has syntax coloring for almost everrthing (including DTML). >And if you don't like it you can make your own. :-) It's not >free, but it's cheap. >

2 1

RE: [Zope] url_quote and "javascript quote"
by Smith, Neil 02 Apr '02

02 Apr '02

iap(a)y2fun.com writes: > ... > The problem is that I can't pass binary string from server by "url_quote" > and decode it in the broswer by "unescape". > > My questions: > 1) Is there any zope object can be used to encode string in "javascript" > way in the server side? I had a similar problem that I needed to deal with quote characters in some form data that was being handled in javascript. I added a new quoting format to dtml-var. I changed DT_Var.py in Lib\Python\DocumentTemplate to add the following function: def jscript_quote(v, name='(Unknown name)', md={}): v=str(v) if find(v,"\\") >= 0: v=join(split(v,"\\"),"\\\\") if find(v,"'") >= 0: v=join(split(v,"'"),"\\'") if find(v,'"') >= 0: v=join(split(v,'"'),'\\"') if find(v,"\t") >= 0: v=join(split(v,"\t"),"\\t") if find(v,"\n") >= 0: v=join(split(v,"\n"),"\\n") if find(v,"\r") >= 0: v=join(split(v,"\r"),"\\r") return v Probably not the most efficient way to do it, but it works. You also need to add a reference to it in the "args=parse_params.." line, and to "modifiers". You could always just extend this to do the encoding of non-displayable characters as well. Look at the code for url_encode. It would be nice if there was a product for this, but that's a bit beyond my experience at present. -- Neil Smith Sorry about the following stuff, it's added by my company's mail server, not by me. ********************************************************************** The information contained in this e-mail is confidential and intended only for the use of the addressee. If the reader of this message is not the addressee, you are hereby notified that you have received this e-mail in error and you must not copy, disseminate, distribute, use or take any action as a result of the information contained in it. If you have received this e-mail in error, please notify postmaster(a)npower.com (UK 01384 275454) and delete it immediately from your system. Neither Npower nor any of the other companies in the Innogy group from whom this e-mail originates accept any responsibility for losses or damage as a result of any viruses and it is your responsibility to check attachments (if any) for viruses. Npower Limited Registered office: Windmill Hill Business Park, Whitehill Way, Swindon SN5 6PB. Registered in England and Wales: number 3653277 This e-mail may be sent on behalf of a member of the Innogy plc group of companies. **********************************************************************

1 0

[HELP] CookId and FTP upload problem
by Frdric Lemaitre 02 Apr '02

02 Apr '02

Hello, I posted this message last week, i didn't have any response, so i try another time : Like many others, in order to let user publish content without taking care of the "Id", i use a method "cookId" in order to generate a valid object's id from a "Title". Exemple : When an user upload the file "Fréd Reunion.doc" "cookId" generates the id : "FredReunion.doc" ==> Ok. It's work fine, but i got a problem with FTP acces when an user "drag and drop" a folder named "Fred Folder" and it's content. The FTP log is : MKD "Fred Folder" CWD "Fred Folder" ==> 550 No such directory. Cause the "Fred Folder" doesn't exist, it's "FredFolder". So, the content of the folder is not uploaded. I found in the file "\Zope\ZServer\FTPServer.py", the method : def cmd_cwd (self, line): 'change working directory' response=make_response(self, self.cwd_completion, self._join_paths(self.path,line[1])) request=FTPRequest(line[1],'CWD',self,response) handle(self.module,request,response) Can anybody help me, is there a way to patch this method ? Something like "line = cookId(line)" doesn't seem to work. Any idea ? Thanks in advance. P.S : Excuse my english Fred.

1 0

Displaying external content (ala inline frames)
by JP Glutting 02 Apr '02

02 Apr '02

Hi All, Does anyone know of a product for dsplaying external content in Zope? I am thinking of specifically something like an inline frame, where the document would show up (stripped of headers) inserted into a DTML Document / Method. I am getting ready to write one myself (I have some content on two different servers, and need to keep some specific parts of it on (cgi) a server with more power, but I want to keep it under the same URL). Right now I am using Frames, but I am not happy with that solution. Does anyone know of such a beast? Thanks, JP -- ============================================================================ JP Glutting, MPH Ph: 617-632-3824 Bioinformatics Fx: 617-632-3351 Department of Cancer Immunology and AIDS 44 Binney Street Dana-Farber Cancer Institute D1510A Email: John-Paul_Glutting(a)dfci.harvard.edu Boston, MA 02115 ============================================================================

3 2

Formulator and ZDebug incompatibility
by Itai Tavor 02 Apr '02

02 Apr '02

Hi, I posted this question on the Formulator mailing list but it didn't seem to interest anyone there, so I'm posting it here in hope that anyone here has some helpful info or a workaround. It seems that Formulator is still incompatible with ZDebug. This problem was discussed briefly back in May 2001 (<http://lists.zope.org/pipermail/zope/2001-May/091103.html>), related to Formulator 0.9.1 and ZDebug 0.2. I'm using Formulator 1.2.0 and ZDebug 0.3 in Zope 2.4.4b1, and I have the same problem - an error message if a form field fails to validate - although the error message is a bit different this time: Error type: TypeError Error value: __init__() takes exactly 3 arguments (2 given) Traceback (innermost last): File /usr/local/zope/2.4.4b1/lib/python/ZPublisher/Publish.py, line 223, in publish_module File /usr/local/zope/2.4.4b1/lib/python/ZPublisher/Publish.py, line 187, in publish File /usr/local/zope/2.4.4b1/lib/python/Zope/__init__.py, line 226, in zpublisher_exception_hook (Object: Forms) File /usr/local/zope/2.4.4b1/lib/python/ZPublisher/Publish.py, line 171, in publish File /usr/local/zope/2.4.4b1/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: feedback) File /usr/local/zope/2.4.4b1/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: feedback) File /usr/local/zope/2.4.4b1/lib/python/OFS/DTMLMethod.py, line 200, in __call__ (Object: feedback) File /usr/local/zope/2.4.4b1/lib/python/DocumentTemplate/DT_String.py, line 546, in __call__ (Object: feedback) File /.../Zope/Products/ZDebug/DTMLDebug.py, line 305, in debug_render_blocks File /.../Zope/Products/ZDebug/DTMLDebug.py, line 237, in debugException File /.../Zope/Products/ZDebug/DTMLDebug.py, line 303, in debug_render_blocks File /usr/local/zope/2.4.4b1/lib/python/DocumentTemplate/DT_Try.py, line 212, in render File /usr/local/zope/2.4.4b1/lib/python/DocumentTemplate/DT_Try.py, line 221, in render_try_except File /.../Zope/Products/ZDebug/DTMLDebug.py, line 287, in debug_render_blocks File /.../Zope/Products/ZDebug/DTMLDebug.py, line 237, in debugException File /.../Zope/Products/ZDebug/DTMLDebug.py, line 182, in debugWithNamespace TypeError: (see above) Anybody else seeing this? Anything I can do about it? TIA, Itai -- -- Itai Tavor -- "Je sautille, donc je suis." -- itai(a)optusnet.com.au -- - Kermit the Frog -- -- -- -- "If you haven't got your health, you haven't got anything" --

2 2

IIS, PCGI, authentication
by Tom Nixon 02 Apr '02

02 Apr '02

I am running Zope under IIS using PCGI and it works great, but I can't view pages that require authentication. I found the following in the archive but it caused a forbidden error rather than popping up the login dialog. Does anyone know what the easiest way to do this is? T. Note that you probably have to tweak your IIS configuration to get IIS to pass authentication headers to Zope. You need to make sure that BOTH "Windows NT Challenge/Response" AND "Basic Authentication" are DESELECTED for the cgi directory where you placed the cgi exe. Otherwise, IIS will intervene on every request and try to do the authentication itself (which will fail, of course).

3 2

Re: urlopen works outside Zope, not inside
by Bill Bell 01 Apr '02

01 Apr '02

"Bak @ kedai" <kedai(a)kedai.com.my> wrote, in part: >i have used urllib succesfully from within zope. checkout KebasData >(http://www.zope.org/Members/kedai/KebasData) ></shameless plug> :P > >and it does what i think you wanted to do. Shameless plug or not, an interesting idea. I'll have a look. (I still want to know where my little code has gone off the rails though.) Thanks, Bak. Bill ------------ "It is the time that you have wasted for your rose that makes your rose so important."--St-Exupery

1 0

[��] IMT-2000�� Բ��ϴ� �� ...
by �� 01 Apr '02

01 Apr '02

1 0