September 2003 - Zope

Indexing by search engine
by Marko Kruijer 25 Sep '03

25 Sep '03

I've got a zope site at myzopeserver:portnumber/mysite the url www.mysite.com is rerouted by Apache to zoperoot/mysite if i enter www.mysite.com in my webbrowser zope renders the index_html inside mysite. That's fine, however if i submit my site to a search engine the search engine indexes the folder's (mysite is the folder) title! my index_html has al necessary tags, i.e. title, meta tags etc. so somehow the search engine doesn't render my index page whereas my browser does. í am now using a dtml method as index_html, could this be the problem? or is there something else wrong here?

1 0

ZWiki + Plone = funny link
by Chihiro Kuraya 25 Sep '03

25 Sep '03

Greetings, I have installed Zope-2.6.2 + CMFPlone-1.0.5 + Zwiki-0.22.0 and created [ZWiki Web] object inside plone site. ZWiki has default page titled HelpPage, which contains some anchor link as follows: "User interface":#ui <br> "Navigation":#navigation <br> "Email subscription":#email <br> But this link jump to FrontPage instead of HelpPage itself. Why this happens ? Are there any work around to this problem ? --- Chihiro Kuraya

1 0

run zope and missing inituser
by Riccardo Gaggero 25 Sep '03

25 Sep '03

i install zope in my home directory in debian (NOT ROOT) wget http://www.zope.org/Products/Zope/2.6.2/Zope-2.6.2-linux2-x86.tgz gunzip -c Zope-2.6.2-linux2-x86.tgz |tar xvf - cd Zope-2.6.2-linux2-x86 ./install the file inituser is ok start zope the index page is ok but i can not logon http://plutone:8080/manage the user admin not work stop zope and the file inituser is missing run ./bin/python ./zpasswd.py -u=admin -p=pippo ./inituser the file inituser is ok start zope the index page is ok but i can not logon http://plutone:8080/manage stop zope and the file inituser is missing WHY????

3 2

looping over plone folders
by Mitch Pirtle 25 Sep '03

25 Sep '03

Hi list, Another newbie-ish question, looked in the FAQ but couldn't find an example that was clear enough... I'm recreating the navbar in a plone portal by hand, looping over the plone folders in the root folder of the plone site. Ok, that's what I *want* to do, and need help from a zenmaster on how to do it within plone :^) The reason for this is that I'd like it to be dynamically-generated, based on the folders created; and hope to have a javascript-based dynamic menu populated by the objects within those root folders. So far, when I use examples of looping (via ZPT documentation), Plone throws a security error and refuses to cooperate. So I suppose the two questions are: 1) How do you do this in Plone? 2) Is there a better approach? -- mitchy

3 3

Upgrade from 2.6.1 to 2.6.2
by Paolo Dina 25 Sep '03

25 Sep '03

Hi! Some days ago i posted to the mailing list a request of help about upgrade or dont upgrade my zope server! First of all, thanks to the people that gave me an input. Your suggestion was to go for upgrade, so i performed this tasks: 1) zope installation; 2) copy /Zope-2.6.1-linux2-x86/var/Data.* in /Zope-2.6.2-linux2-x86/var/ 3) copy /Zope-2.6.1-linux2-x86/lib/python/Products in /Zope-2.6.2-linux2-x86/lib/python/Products Well, i started Zope and all went ok. Is this the correct way to migrate from 2.6.1 to 2.6.2? In particular, is zodb shipped with 2.6.1 100% compatible with zodb in 2.6.2? Thanks once again! Paolo Dina

3 2

first-variables in a simple loop on a list
by Smith, Neil (Worcester) 25 Sep '03

25 Sep '03

I have a dtml-in loop over a simple list like: <dtml-set mylist="[1,2,3,4]"> <dtml-in mylist> <dtml-var sequence-item> </dtml-in> It's actually within a Z-SQL method, and the list is returned from a form but I don't want to over complicate the example. Now I really only want the unique values from the list. I figured the best way would be to sort the list then use the first- grouping variables. I can do this just fine if the dtml-in is on something returning named variables, but my problem is that I can't figure out first-what when it's just looping on a simple list. I've tried first-sequence-item which didn't work. I tried setting a prefix="ml" and first-ml_item or first_ml_item but that didn't work either. Can I use first- in this scenario? Is there an easier way of getting unique values from a list? Any ideas? Thanks -- Neil Smith ********************************************************************** The information contained in this e-mail is confidential and intended only for the use of the addressee. If the reader of this message is not the addressee, you are hereby notified that you have received this e-mail in error and you must not copy, disseminate, distribute, use or take any action as a result of the information contained in it. If you have received this e-mail in error, please notify postmaster(a)npower.com (UK 01384 275454) and delete it immediately from your system. Neither Npower nor any of the other companies in the Innogy group from whom this e-mail originates accept any responsibility for losses or damage as a result of any viruses and it is your responsibility to check attachments (if any) for viruses. Npower Limited Registered office: Windmill Hill Business Park, Whitehill Way, Swindon SN5 6PB. Registered in England and Wales: number 3653277. This e-mail may be sent on behalf of a member of the Innogy group of companies. **********************************************************************

2 1

Calling Scripts with arguments from ZPT and XML-RPC
by darkness 25 Sep '03

25 Sep '03

Just started playing with Zope, so apologies if this is covered in the documentation somewhere. I have to say that Zope is really cool. I'm trying to post variables to a ZPT, and have that ZPT call a script which might do something with the form variables. Normally, if I were to call my script from a URL I could use 'http://zopeserver/MyScript?theArg=foo', and assuming the Script named MyScript had an argument named theArg, everything would work. However, if I have a ZPT called myZPT.html, I call it with a URL such as 'http://zopeserver/myZPT.html?theArg=foo', and myZPT.html contains something like '<span tal:replace="here/MyScript" />', the parameter theArg is not correctly passed to MyScript, and MyScript fails to execute because it was called with too few arguments. I'm aware I can declare MyScript to take no arguments and just access them as context.REQUEST.theArg, but then MyScript isn't very useful if you try to use it via XML-RPC. I kind of want to be able to call MyScript using either XML-RPC or internally from ZPT. I can't declare the argument for MyScript as 'theArg=context.REQUEST.get("theArg", None)' because it complains that 'context' doesn't exist at that point. I could do something like declaring MyScript to have argument list 'theArg=None', and then do something like 'if not theArg: theArg = context.REQUEST.get("theArg", None)' but that's ugly. Presumably I could do something like 'tal:replace="python: here.MyScript(theArg=request.theArg)"' but that seems ugly too: to include a 'python:' TALES Python expression where (it seems to me) a TALES path expression should do just fine. Is there some clean way around this? One might consider that when a call is made to an object from ZPT, and that object has a known argument list, ZPT/Zope should attempt to fill in the arguments to that object just as if it were called from XML-RPC (or directly via a URL). TIA, darkness --

3 4

RE: [Zope] Urgent: Severe problem
by Passin, Tom 24 Sep '03

24 Sep '03

Sorry, my last post get sent by mistake just when I started to write it. It does sound like a DoS situation. The large number of coordinated machines all sending the same peculiar request would fit in perfectly. You say the attack started Sept. 15, but the log extract I included in my earlier post happened in August. I would say that a new wave of machines got infected, and they were given the signal to wake up and do this attack You have been contacting a mailing list, BTW. Cheers, Tom P [Juan Lorenzana ] Tom, So do you think this is a DoS attack? I have seen DoS attacks before but I have never seen one that uses over 2,000 machines. I do not think that the packets are spoffed, because 1) I can ping them, 2) They appear to primarily originate from about 8 different countries only, 3) If I stop the server (I did that for one full day), they keep going even after a day- most DoS attacks stop when the system crashes or stops responding. Anyway, if it not related to zope, what do you think this flood is related to? And why from all over the world. The attack started September 15 and the customer has no idea why they would single out his site. Pretty low volume site. This system is on a shared hosting machine, and the attacks are only focused on this one customer and not the whole machine. Any thoughts? We thought that there might be a database in a CMF servers and all of sudden, someone put this customers site down as one of them and all zope users started trying to access it. We do not use CMF and I had never heard of it before so please excuse my ignorance as to what it actually does. Like you mentioned,it probably has nothing to do with CMF. The only reference in google that we could fine was to zope, so we thought there might be a link. I am thinking about calling CERT to see if this is from a virus, but wanted to make sure I understood the cause more before notifying CERT. P.S. If zope(a)zope.org is a mailling list,please let me know so that I do not bore everyone with our problem. Thanks. Juan "Passin, Tom" wrote: [ Juan Lorenzana] > My name is Juan Lorenzana and I am a system administrator for > an ISP in > Brazil. They offer virtual servers and virtual hosting. The reason I > am sending you this email is that one of our virtual hosting > customer's > web site is being flooded with requests that appear to be related to > zope. An excerpt of the log files appear below: > > > Access Log file: > 168.226.70.160 - - [24/Sep/2003:11:34:50 -0600] "GET > /put?ver=01&task=newzad&first=1 HTTP/1.1" 404 285 > 216.244.197.250 - - [24/Sep/2003:11:35:55 -0600] "GET > /put?ver=01&task=newzad&first=1 HTTP/1.0" 404 273 > 200.63.144.150 - - [24/Sep/2003:11:36:10 -0600] "GET > /put?ver=01&task=newzad&first=1 HTTP/1.0" 404 273 The same thing has also been seen in a php context, so it is probably nothing to do with Zope - "The server farm is being hit by about 30,000 of these per minute along with all of your valid requests : from http://forum.mydomain.com/viewtopic.php?t=2241 <http://forum.mydomain.com/viewtopic.php?t=2241&start=15> &start=15 - -- begin log snip -- 4.35.208.254 [27/Aug/2003:14:13:46 -0700] "\x87\x92\xdc\xecf\xaa\xb8,i\x99?\xd7\xe1\xff\xe3\xabi\x9a\xb9tl\xba\"#\ xe7\ xf5\xaa\x1fp\x1b0\xe0xmH\xb9\xcd\t\xdd\xf5b\xa9\x1b&S\x8d\x8b\xba$\xb6\x 80\xcfJU\xb3I\xec\x83*!\xea2^\xff\x1fd\x9c\x0c\xe3\x9b\xac\x01\xd4\x90\x b1\x8\xd7'P\xb5Y\xa3\x14\x04\xdb\x16\x11E\xad\x1c\xc8\x06\xf9\xc9K \x04\xe0\xa2\x8c\xb1FlxG\xb6\xc9\x9as\xb5x\xc5\x91\xc9=\xba'\xe6\x86@\xb 2)Mw\xa6\xc9@i" 400 371 200.67.219.5 www.Gustavo.com [27/Aug/2003:14:13:46 -0700] "GET http://www.instituto.com.br/attackDoS.php?ver=01 <http://www.instituto.com.br/attackDoS.php?ver=01&task=newzad&first=1> &task=newzad&first=1 HTTP/1.1" 404 5 -- end log snip -- " There are other php examples too. The Zope Hot Patch does not look like the query string. the only part that has a name starting with "z" is this - from zLOG import LOG, INFO I doubt that this has anything to do with zope per se, given the above. Anyone else know anything more concrete than speculation? Cheers, Tom P

1 0

RE: [Zope] Urgent: Severe problem
by Passin, Tom 24 Sep '03

24 Sep '03

[ Juan Lorenzana] > My name is Juan Lorenzana and I am a system administrator for > an ISP in > Brazil. They offer virtual servers and virtual hosting. The reason I > am sending you this email is that one of our virtual hosting > customer's > web site is being flooded with requests that appear to be related to > zope. An excerpt of the log files appear below: > > > Access Log file: > 168.226.70.160 - - [24/Sep/2003:11:34:50 -0600] "GET > /put?ver=01&task=newzad&first=1 HTTP/1.1" 404 285 > 216.244.197.250 - - [24/Sep/2003:11:35:55 -0600] "GET > /put?ver=01&task=newzad&first=1 HTTP/1.0" 404 273 > 200.63.144.150 - - [24/Sep/2003:11:36:10 -0600] "GET > /put?ver=01&task=newzad&first=1 HTTP/1.0" 404 273 The same thing has also been seen in a php context, so it is probably nothing to do with Zope - "The server farm is being hit by about 30,000 of these per minute along with all of your valid requests : from http://forum.mydomain.com/viewtopic.php?t=2241&start=15 - -- begin log snip -- 4.35.208.254 [27/Aug/2003:14:13:46 -0700] "\x87\x92\xdc\xecf\xaa\xb8,i\x99?\xd7\xe1\xff\xe3\xabi\x9a\xb9tl\xba\"#\ xe7\ xf5\xaa\x1fp\x1b0\xe0xmH\xb9\xcd\t\xdd\xf5b\xa9\x1b&S\x8d\x8b\xba$\xb6\x 80\xcfJU\xb3I\xec\x83*!\xea2^\xff\x1fd\x9c\x0c\xe3\x9b\xac\x01\xd4\x90\x b1\x8\xd7'P\xb5Y\xa3\x14\x04\xdb\x16\x11E\xad\x1c\xc8\x06\xf9\xc9K \x04\xe0\xa2\x8c\xb1FlxG\xb6\xc9\x9as\xb5x\xc5\x91\xc9=\xba'\xe6\x86@\xb 2)Mw\xa6\xc9@i" 400 371 200.67.219.5 www.Gustavo.com [27/Aug/2003:14:13:46 -0700] "GET http://www.instituto.com.br/attackDoS.php?ver=01&task=newzad&first=1 HTTP/1.1" 404 5 -- end log snip -- " There are other php examples too. The Zope Hot Patch does not look like the query string. the only part that has a name starting with "z" is this - from zLOG import LOG, INFO I doubt that this has anything to do with zope per se, given the above. Anyone else know anything more concrete than speculation? Cheers, Tom P

4 3

RE: [Zope] Urgent: Severe problem
by Passin, Tom 24 Sep '03

24 Sep '03

[ Juan Lorenzana ] Tom, So do you think this is a DoS attack? I have seen DoS attacks before but I have never seen one that uses over 2,000 machines. I do not think that the packets are spoffed, because 1) I can ping them, 2) They appear to primarily originate from about 8 different countries only, 3) If I stop the server (I did that for one full day), they keep going even after a day- most DoS attacks stop when the system crashes or stops responding. Anyway, if it not related to zope, what do you think this flood is related to? And why from all over the world. The attack started September 15 and the customer has no idea why they would single out his site. Pretty low volume site. This system is on a shared hosting machine, and the attacks are only focused on this one customer and not the whole machine. Any thoughts? We thought that there might be a database in a CMF servers and all of sudden, someone put this customers site down as one of them and all zope users started trying to access it. We do not use CMF and I had never heard of it before so please excuse my ignorance as to what it actually does. Like you mentioned,it probably has nothing to do with CMF. The only reference in google that we could fine was to zope, so we thought there might be a link. I am thinking about calling CERT to see if this is from a virus, but wanted to make sure I understood the cause more before notifying CERT. P.S. If zope(a)zope.org is a mailling list,please let me know so that I do not bore everyone with our problem. Thanks. Juan "Passin, Tom" wrote: [ Juan Lorenzana] > My name is Juan Lorenzana and I am a system administrator for > an ISP in > Brazil. They offer virtual servers and virtual hosting. The reason I > am sending you this email is that one of our virtual hosting > customer's > web site is being flooded with requests that appear to be related to > zope. An excerpt of the log files appear below: > > > Access Log file: > 168.226.70.160 - - [24/Sep/2003:11:34:50 -0600] "GET > /put?ver=01&task=newzad&first=1 HTTP/1.1" 404 285 > 216.244.197.250 - - [24/Sep/2003:11:35:55 -0600] "GET > /put?ver=01&task=newzad&first=1 HTTP/1.0" 404 273 > 200.63.144.150 - - [24/Sep/2003:11:36:10 -0600] "GET > /put?ver=01&task=newzad&first=1 HTTP/1.0" 404 273 The same thing has also been seen in a php context, so it is probably nothing to do with Zope - "The server farm is being hit by about 30,000 of these per minute along with all of your valid requests : from http://forum.mydomain.com/viewtopic.php?t=2241 <http://forum.mydomain.com/viewtopic.php?t=2241&start=15> &start=15 - -- begin log snip -- 4.35.208.254 [27/Aug/2003:14:13:46 -0700] "\x87\x92\xdc\xecf\xaa\xb8,i\x99?\xd7\xe1\xff\xe3\xabi\x9a\xb9tl\xba\"#\ xe7\ xf5\xaa\x1fp\x1b0\xe0xmH\xb9\xcd\t\xdd\xf5b\xa9\x1b&S\x8d\x8b\xba$\xb6\x 80\xcfJU\xb3I\xec\x83*!\xea2^\xff\x1fd\x9c\x0c\xe3\x9b\xac\x01\xd4\x90\x b1\x8\xd7'P\xb5Y\xa3\x14\x04\xdb\x16\x11E\xad\x1c\xc8\x06\xf9\xc9K \x04\xe0\xa2\x8c\xb1FlxG\xb6\xc9\x9as\xb5x\xc5\x91\xc9=\xba'\xe6\x86@\xb 2)Mw\xa6\xc9@i" 400 371 200.67.219.5 www.Gustavo.com [27/Aug/2003:14:13:46 -0700] "GET http://www.instituto.com.br/attackDoS.php?ver=01 <http://www.instituto.com.br/attackDoS.php?ver=01&task=newzad&first=1> &task=newzad&first=1 HTTP/1.1" 404 5 -- end log snip -- " There are other php examples too. The Zope Hot Patch does not look like the query string. the only part that has a name starting with "z" is this - from zLOG import LOG, INFO I doubt that this has anything to do with zope per se, given the above. Anyone else know anything more concrete than speculation? Cheers, Tom P

1 0