January 2003 - Zope - Zope lists

METAL and DOCTYPE
by Peter Bengtsson 20 Jan '03

20 Jan '03

When I use validator.w3c.org on my page it complains that no DOCTYPE is set. But the PageTemplate (metal master) looks like this:: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html metal:define-macro="standard" tal:define="dummy python:request.RESPONSE.setHeader('Content-Type','text/html;; charset=iso-8859-1');dummy here/StopCache"> <head> .... Why does it not recognize my DOCTYPE?

6 7

RE: [Zope] Problem for extracting long text with zsql method?
by McDonnell, Larry 20 Jan '03

20 Jan '03

Hi, I have just recently went through this and was able to get it to work (with alot of help from Charlie Clark). But I used 0.9.2.win32-py2.1.exe since this is what Zope is using for it's Python. First load MySQL - mysql-3.23.54-win.zip Next load Python 2.1 - Python-2.1.exe Next, perform the following: This is from "Crosbie Fitch" - http://sourceforge.net/forum/forum.php?thread_id=621106&forum_id=70461 which provides a fix. By: locquet ( Bertrand LOCQUET ) RE: Install Win32 Pythonware Distro 2002-10-03 07:36 I found a solution Before installing MySQL-python-0.9.2.win32-py2.1.exe Just add an entry to you register base : [HKEY_LOCAL_MACHINE\SOFTWARE\Python\PythonCore\2.1\InstallPath] @="C:\\Program Files\\WebSite\\bin" Replace the default value @= with the path to you python.exe installed with Zope. Copy the following files from my Python 2.1 directory to c:\zope\lib\python: CompatMysqldb.py CompatMysqldb.pyc CompatMysqldb.pyo _mysql.pyd _mysql_exceptions.py _mysql_exceptions.pyc _mysql_exceptions.pyo MySQLdb (the entire directory) Install 0.9.2.win32-py2.1.exe and unzip the tar ZMySQLDA-2.0.8.tar.gz to the \zope\lib\python\product area. Restart Zope. I had a bad file in the ZMySQLDA-2.0.8.tar.gz where I had most of my problems. Good Luck. -----Original Message----- From: zope-admin(a)zope.org [mailto:zope-admin@zope.org]On Behalf Of b.nguyen(a)chime.ucl.ac.uk Sent: Monday, January 20, 2003 11:38 AM To: Chris Withers Cc: zope(a)zope.org Subject: Re: [Zope] Problem for extracting long text with zsql method? Hi Chris, Thanks for the suggestions. Sorry for my typing mistake in my first email, I am actually using Zope 2.6.0. I have installed the suggested modules ZMySQLDA-2.0.8.tar.gz and MySQL-python- 0.9.2.win32-py2.2.exe. But I got the following error : ...Zope could not import Products.ZMySQLDA Traceback (innermost last): Module OFS.Application, line 541, in import_product Module Products.ZMySQLDA, line 91, in ? Module Products.ZMySQLDA.DA, line 92, in ? File Module Products.ZMySQLDA.db, line 89, in ? ImportError: No module named _mysql I have seen other people posted the same error message in the mail archives, but I didn't see a suitable solution for it. Would you have any idea? Anyway, if anyone has solve the problem, please email me. cheers, Bonnie On 20 Jan 2003 at 15:24, Chris Withers wrote: > b.nguyen(a)chime.ucl.ac.uk wrote: > > I am running Zope 2.0 in my machine with platform Win XP. I have succeed in > > connecting Zope to mysql database (which is currently held in another machine, Unix > > server) by using ZODBCDA-3.1.0b2-win32-py21. > > Why not just to ZMySQLDA (you'll need mysql-python too) directly: > http://sourceforge.net/projects/mysql-python > > I'd echo Deiter's comments about upgrading to 2.5.1 or 2.6.0... > > cheers, > > Chris > _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

FTP Access via Dreamweaver Can't Create Folders - Some Blame Zopes?
by Edward Pollard 20 Jan '03

20 Jan '03

Ugh. In our working with Zope, we're moving to let users to create websites in a user subdirectory of Zope. Most, if not all, are using Dreamweaver as a development tool. We have encountered a problem in Dreamweaver where users cannot create folders in their space. This problem is only in Dreamweaver - not in, say WS_FTP. This problem only popped up as we began applying vigourous security - during initial development we all used "god" accounts and had no problems whatsoever. And I believe the problem is caused by a most peculiar Dreamweaverism. The site log in Dreamweaver tells me that when I go to create a folder, the first thing Dreamweaver does is try to move to the root of the FTP server (CWD \). Now, we've only given our users privilidges in their user subfolders - they simply cannot move to the root of the FTP server! Thus the Unauthorized error pop up, and woe is me. If I go to the root of Zope, and add "FTP Access" as a right to "Authorized", the problem disappears, but not accounts can run willy-nilly via FTP all over Zope. This is, of course, useless. In our Apache web environments, users have read access to the entire tree above their folder - so Dreamweaver works fine. There does not, to my mind at least, seem to be any way to grant FTP Read Only access in Zope. I'd like to just point the finger at Dreamweaver and claim it to be a wretched program - but while this very well may be the case, but I'd also like to make this work. Thoughts? Edward

2 1

The Goblins of Zope
by beno 20 Jan '03

20 Jan '03

Hi; Anyone else had weird, inexplicable things happen with your Zope? Here's a couple of horror stories of mine. I'd love to hear yours. What inspired this post was something that happened tonight. I was playing around with a very simple script when I kept running into errors: Can't convert an integer into a string; Can't convert a string into an integer; etc. I *knew* there wasn't a problem with my script. After a futile hour of trying to track down the *problem*, I decided to copy a perfectly good and currently functioning script, giving it a different name and passing the variables like I do to its parent. Sure enough, I ran into the same errors! Why?! My worst nightmare happened a couple of weeks ago. I decided to rebuild my file structure into something more portable. I had placed a number of scripts and old DTML methods in the root. I decided to copy them all into a folder, add the folder to each of my sites, and put the new folder into each site's path. Simple, right? What could possibly go wrong? Well, I forget the exact errors Zope threw at me, but it was all utter nonsense. I finally decided I'd just restart the sucker. I mean, why not? Bad, bad idea. I couldn't restart it. Worse yet, I ended up having to reinstall Zope. When I went to open my old Data.fs file, the goblins had secretly returned it to the exact state it was in at my last backup...two weeks before! How???? How could it have possibly known?! Also, if you happen to know a good exorsict, please let me know <g> beno

13 34

uploading page templates?
by Andrew Altepeter 20 Jan '03

20 Jan '03

Hi All, I am working on a content management solution for 'fairly-static' content. One of the requirements is that site-maintainers need to be able to create new html files using dreamweaver or front page, and upload those documents into zope. These html documents are really page templates. I have read in the Zope Book that the only way to upload page templates in Zope 2.6 is to first go into the ZMI and add a page template, then using your ftp program, upload to /zope/path/page_template/source.html. ZPT's are the idea way for me to structure this whole system, but is there an easier way to upload ZPT's (like, setting the default upload for html documents to be a ZPT, not a DTML document, and not needing to specify /source.html?) I'm thinking that I might need to hack the source to get the default behaviour changed: a challenge I am up for. Is there a better way to do this, or am I out of luck? Any suggestions are much appreciated. Thanks, Andy

4 5

ANNOUNCE: Pound - reverse proxy and load balancer - v1.2
by Robert Segall 20 Jan '03

20 Jan '03

This is to announce the release of Pound v1.2. This is mostly a bug fix release. Most prominent problems fixed: - for some reason a few characters went missing in the definition of request strings. This was usually observed in form submission - when Pound would reply with a "Request not allowed". - problems in handling "100 Continue" server responses. The software is at version 1.2 (production quality). Further testing (especially under heavy loads), improvements and suggestions are welcome. What is Pound (from the Web page) - a reverse-proxy: it passes requests from client browsers to one or more back-end servers. - a load balancer: it will distribute the requests from the client browsers among several back-end servers, while keeping session information. - an SSL wrapper: Pound will decrypt HTTPS requests from client browsers and pass them as plain HTTP to the back-end browsers. - an HTTP/HTTPS sanitizer: Pound will verify requests for correctness and accept only well-formed ones. - an HTTP/1.1 to 1.0 proxy. - a fail-over-server: should a back-end server fail, Pound will take note of the fact and stop passing requests to it until it recovers. - a request redirector - it will pass client requests to separate groups of servers, based on required URL and the presence or absence of headers (pattern matching) Pound was specifically developed to serve as a front-end for multiple instances of Zope running on top of a common ZEO storage, but can be used with any other web server. A patch for the Python source of z2.py is available as part of the distribution to allow using Pound's SSL capabilities. Pound is currently in use in several medium to large volume sites and seems to be holding up quite well: largest reported site does about 3.5 million requests per day, peaking at over 300 requests per second. The speed is well superior to other, equivalent solutions, the configuration is much simpler and the necessary resources (CPU, RAM, disk) are much, much lower. Pound is distributed under the GPL. For further information, download, etc. please see http://www.apsis.ch/pound Enjoy and let me know how it works for you. -- Robert Segall Apsis GmbH Postfach, Uetikon am See, CH-8707 Tel: +41-1-920 4904

1 0

Need help with SendmailHost
by Russell Hires 20 Jan '03

20 Jan '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I downloaded and installed SendmailHost, but when I use it with the <dtml-sendmail> tag, I get the following error: Zope Error Zope has encountered an error while publishing this resource. Error Type: TypeError Error Value: _send() takes exactly 4 arguments (3 given) I don't know what the 4 arguments could be...if necessary, I can post the traceback, and the dtml that I used to get this error... Anyone have a solution? Russell - -- Linux -- the OS for the Renaissance Man -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE+KrLuAqKGrvVshJQRAkKJAKCIl93mAlt6gb2rPvIk+VautxiGDQCaA5Ww ravnanmg3NAUgu/8cSHKevs= =m2jY -----END PGP SIGNATURE-----

3 2

Duplicated SESSION key ERROR?
by Garikoitz Araolaza 20 Jan '03

20 Jan '03

I'm having much trouble with this Duplicated Session Id Key error. It usually happens whenever a user logs in with more than a browser window. After some requests, Zope seems to find that there are 2 users with the same Session Id and system breaks... Any hint where to look for? Thanks in advance! Gari Zope Version (Zope 2.5.1 (binary release, python 2.1, linux2-x86), python 2.1.3, linux2) Python Version 2.1.3 (#1, Apr 15 2002, 11:13:45) [GCC 2.7.2.3] System Platform linux2 _________________________________________ Garikoitz Araolaza gari(a)eibar.org

3 2

Zope with Novell NDS
by D2 20 Jan '03

20 Jan '03

Has anybody used Zope with Novell's NDS (via LDAP) as a data repository ? As NDS can handle billions of objects and is using web standards, using them together may be performing.

6 9

More regular expressions security
by Tue Wennerberg 20 Jan '03

20 Jan '03

Regular expressions should be allowed by default. I've spent some time trying to find out why regular expressions are not allowed in Zope throught-the-web development. The answer I hear is: "Because it's a security issue". Digging a little deeper, it turns out to be because TTW script developers can cause a Denial of Service from Zope by writing a particular nasty regular expression in a script, causing Zope to use 100% cpu time. So it's a question of trust. But surely a script developer can be trusted not to cause a DoS on the site he's working on! Script developers should be empowered, not crippled! Some common objections: "People can just write an external scripts instead." - True, but it also makes everyday work much more cumbersome. And some script developers don't have access to the file system. Surely, TTW scripts exist to make life easier for site developers. "The administrator can allow the 're' module." Also true, but some people won't do that because they think it will expose their site to all kind of attacks from anonymous users. This isn't the case (or is it?). So there it is. I'm writing this because I think that Zope is missing out on a great feature, and because I haven't gotten any answers indicating that there are other (worse) reasons why regular expressions are banned. Am I wrong? Am I being silly here? Sincerely, Tue Wennerberg Civilingeniør og Freelance Udvikler http://tuewennerberg.dk/ - tue(a)wennerberg.dk - (+45) 4043 6735

5 7