September 2004 - Zope

Fundamentals of Zope Security
by Jason Leach 18 Sep '04

18 Sep '04

Somone told me the other day you could check REQUEST['PUBLISHED'] to see how something was called. Jason.

1 0

ASP
by John Poltorak 18 Sep '04

18 Sep '04

Does Zope support pages using MS ASP? -- John

4 5

Zope app for hotel bookings
by John Poltorak 18 Sep '04

18 Sep '04

Is anyone aware of a Zope app for hotel bookings? -- John

5 5

RE: [Zope] Having problems with python script
by Laura McCord 17 Sep '04

17 Sep '04

I just realized that I should have made my fields of type VARCHAR instead of CHAR. Apparently, my values were padded with whitespace. Thanks so much for responding. -Laura -----Original Message----- From: Dan Fairs [mailto:monster@spiderplant.net] Sent: Friday, September 17, 2004 3:28 PM To: Laura McCord Cc: zope(a)zope.org Subject: Re: [Zope] Having problems with python script Hi Laura, > <div tal:define="results here/view_users; > batch python:here.getBatch(results)"> > . > . > . > <div tal:repeat="result batch" > <div tal:define="userName result/username"> > <div tal:replace="python:here.ldapInfo(userName)"/> -----> Does > not work!!! What's the problem exactly? You don't get anything back? What happens if you put in a <pre tal:content="string:#${userName}#">user</pre> just after the div with the define? Does it contain what you expect? Look in particular for case sensitivity, unexpected whitespace padding (often happens if that username is coming out of a database field of type CHAR)? Look for funny spaces/characters before and after those hash signs. Cheers, Dan

1 0

Publishable object no-persistent
by Garito 17 Sep '04

17 Sep '04

Hi all I would like to know if I can create a publishable object but not persistent I would like to use it as return value of __bobo_traverse__ Thanks!

3 2

Technical Question - Where the Session Data Stored ?
by kepes.krisztian 17 Sep '04

17 Sep '04

Hi ! My problem is that: I need to persistent store many form datas, because I need to create multiple edit forms. They are multiple forms, because the first is open the next, but in same browser window, and when the second form opened, the first form is not saved to database, only stored in persistent store. And when the second form is closed by submit, the first form is showed, and the first form's data is get from persistent store, not from database. So it is usable for multiple edits. I don't want use popup windows for this operation, popups are blocked in many machine. I write this mechanism yesterday. The first form is load the datas from outer database. The first form's one button is store the first form's request to the session with a special ID. The second form is opened, and the special ID is stored. When the second form is submitted (ok, or cancel), the second form is store the result in session[special ID]['result'], and redirected to first form with the special ID. First form is see the special ID, and it is determine, that datas are not get from database, they are get from session[special ID], and session[special ID]['result']. When the first form is saved (apply or ok), this state is saving to the database, and next the datas are loaded from the database. So: Because I save the states to session, all of them are stored with unique (new) key. While session is living, this parameters are not released, because I don't know, when they are used (example: open a page in multiple browser windows, and when the first is saved, the second is hold same special ID). The technical question: where the session data stored ? Because it is memory, it is cause memory leak. When in file, it is not problem. So the question is: session is good for persistent data storing with multiple forms, or I need to create an outer database table for these operations ? Thanx for help: ft PS: Please write to my private mail address too, because I'm in digest mode.

3 5

Re: [Zope] Having problems with python script
by Dan Fairs 17 Sep '04

17 Sep '04

Hi Laura, > <div tal:define="results here/view_users; > batch python:here.getBatch(results)"> > . > . > . > <div tal:repeat="result batch" > <div tal:define="userName result/username"> > <div tal:replace="python:here.ldapInfo(userName)"/> -----> Does > not work!!! What's the problem exactly? You don't get anything back? What happens if you put in a <pre tal:content="string:#${userName}#">user</pre> just after the div with the define? Does it contain what you expect? Look in particular for case sensitivity, unexpected whitespace padding (often happens if that username is coming out of a database field of type CHAR)? Look for funny spaces/characters before and after those hash signs. Cheers, Dan

1 0

Having problems with python script
by Laura McCord 17 Sep '04

17 Sep '04

I have posted this question a few times and I am still struggling on finding the correct way to pass a parameter. This is what I am doing. I am getting results from a zsql method (results here/view_users) and I need to pass a value from that batch (result/username) to a python script This is what it looks like: <div tal:define="results here/view_users; batch python:here.getBatch(results)"> . . . <div tal:repeat="result batch" <div tal:define="userName result/username"> <div tal:replace="python:here.ldapInfo(userName)"/> -----> Does not work!!! If I manually insert a value it works perfectly: <div tal:define="userName python:'lmccord'"> <div tal:replace="python:here.ldapInfo(userName)"/> or <div tal:replace="python:here.ldapInfo('lmccord')"/> If I display the value of userName I get this: <div tal:content="userName"/> ---> lmccord So, what is the problem with passing values derived from a zsql method/database Thanks. :(

1 0

Fundamentals of Zope Security
by Edward Pollard 17 Sep '04

17 Sep '04

Hello all, Simple problem: a password change form. The form is a page template. It submits to another page template. This page template calls a python script that changes your password in LDAP (via external methods). I'm leaving off quite a bit, here, of course. How can I secure the python scripts so that clever users cannot arbitrarily execute them? I realize that its a big question, but I'm thinking I need to fundamentally shift some of my own paradigms, and I'd appreciate all input on the subject. Thanks, --- Edward J. Pollard, B.Sc Webmaster, University of Lethbridge

3 2

ZServer/ZPublisher proxying, or move to "full zope"; need consultant
by Royce 17 Sep '04

17 Sep '04

Hi all, I'm trying to get ZServer to serve a ZPublisher webapp. Previosly we used PCGI directly with apache (evolved from bobo days). Would like to move pieces into "full zope" land over time but have immediate need to get off the PCGI/apache solution as it has been hard to get/keep running on different Linux platforms. I have gotten it mostly running under ZServer fairly easily but resulted in a problem (#2) mentioned below. 1. Our website has html and img content (as well as dtml), which I understand ZServer won't serve. This seems to push me into either (a) apache proxying so that apache can serve html/imgs (results in problem #2 below), or (b) running full Zope via another URL path (having two zhttp_handler's in z2.py), and serving html/imgs from there (requiring me to change all refs to 'em). Suggestions? 2. Can SiteAccess fix the apache proxy BaseLocation URL problem for a ZPublisher/ZServer web app? I read the page (http://zope.org/Members/anser/apache_zserver) about using Evan Simpson's SiteAccess to fix the BaseLocation problem but it requires "full zope" and I'm running a ZPublisher webapp through ZServer. Any way to use this to hardwire a fix in ZServer? 3. Is there any way to pull a ZPublisher app into "full Zope" wholecloth as one big external method? I remember Amos mentioning this as possibility a while back. If not, would appreciate any pointers to docs or descriptions of how much work it is to bring it in a piece at a time. I have tried this route a little bit, but got pretty swamped in "import hell." 4. I would like to find a zope consultant to help us with problems like this on an hourly pay basis for a community website we run. Person should have several years zope-related programming experience, including experience with ZServer/ZPublisher. Please email me at mroyce AT gmail DOT com with a summary of your experience, availability, and hourly rate. Please put "Zope consultant" in message subject. Thanks! Royce

2 3