- Zope - Zope lists

Using ZPT to create XML - early processing
by Ed Leafe 16 Mar '03

16 Mar '03

I've had good success generating XML using Page Templates, but just ran into a problem I can't figure out. I'm trying to create an RSS 2.0 feed, and wanted to be able to fill in the time dynamically in the comment at the top of the page. Here's an example of the first three lines of the page template: <?xml version="1.0" ?>  <rss version="2.0" xmlns:tal="http://xml.zope.org/namespaces/tal" xmlns:xsi = "http://www.w3.org/2001/XMLSchema-instance"> If I try to use TAL in the comment line, it doesn't get processed. It seems that ZPT will not process TAL content within the comment. I've also tried to generate the whole comment tag from TAL using something like: <dummy tal:replace="python:''">foo</dummy> - or - <dummy tal:replace="structure python:''">foo</dummy> - or - <dummy tal:replace="structure python:'<' + '!' + '-- foo -->'">foo</dummy> but they all result in an error when I try to save it: Compilation failed xml.parsers.expat.ExpatError: not well-formed (invalid token): line 17, column 35 So is there any way to generate commented XML using TAL? ___/ / __/ / ____/ Ed Leafe http://leafe.com/ http://opentech.leafe.com

2 2

How to Add an object at the root of a zope tree
by D2 16 Mar '03

16 Mar '03

How to add an object at the root of a Zope tree even if the method has been called inside a subfolder ? I tried location=aq_parent(getattr(self, 'Control_Panel')) it returns the folder where is located the method. (I suppose that 'Control_Panel' is acquired) I tried : location=aq_parent(aq_inner(getattr(self, 'Control_Panel'))) It raises an error : 'aq_parent is not defined'. It's the same with aq_base. Is there a function returning the absolute root ? TIA Andre

2 3

Authentication problem with owner_info
by Nicolas Évrard 16 Mar '03

16 Mar '03

Hello everyone, In order to diplay the person who wrote a new item I use his code : <em tal:content="here/owner_info/id">Owner</em> Unfortunatly this don't work ! I keep getting authentication problems (I test as Anonymous User). Does anybody has an idea why this is happening ? -- (°> Nicolas Évrard / ) Liège - Belgique ^^

3 5

ZDatabaseTool at CeBIT 2003 !
by Andreas Heckel 16 Mar '03

16 Mar '03

Hope to see you at Hall 11 Booth B26 Technical University Ilmenau. -- _______________________________________________________________________ Andreas Heckel andreas(a)easyleading.org LINUX is like a wigwam...no gates...no windows and an apache inside ;-)

1 0

VHM followup... an open proxy probe?
by Dylan Reinhardt 15 Mar '03

15 Mar '03

Looking over the Apache logs a bit more carefully, I can see several requests of the form: http://www.virtualhost.com/misc_/SiteAccess/VirtualHostMonster.gif and http://www.virtualhost.com/p_/zopelogo_jpg Both of which will return graphics positively identifying your server as Zope unless you've taken measures to the contrary. Oops. Around the same times as the probes for site/vhm//, there were several failed requests to use my server as an open proxy... my guess is that open proxies may be what the probe is *really* looking for. Zope servers running VHM are highly likely to be running Apache and given the variety and age of the available docs on setting up Zope with Apache, it may be fair to assume that some number of Zope+VHM+Apache sites are set up insecurely. A couple thoughts/recommendations: 1. Read up on configuring and securing Apache proxy services: http://httpd.apache.org/docs/mod/mod_proxy.html#access 2. Don't volunteer configuration info to potential attackers. You can conceal misc_ and p_ from your virtual sites by placing empty folders with these names in the folder above your virtual root. You may wish to name your VHM object something unpredictable. Ensure that Apache is configured with ServerSignature Off. FWIW, Dylan

3 2

odbc da for zope on linux
by Wade Leftwich 15 Mar '03

15 Mar '03

>Date: Thu, 06 Mar 2003 13:21:06 +0000 >From: andy <andy(a)bigorangelovebus.net> >Subject: odbc da for zope on linux >Hi, >Am I right in syaing that there is no such DA for zope running on linux? >I can find the DA for the win platform, but can't find an equivalent for >Linux..... I need to access information in an Access copied on a Linux >server (where zope will also be running). All the clients connected to >the server are Win98, so can't run Zope as a service anywhere else. Not >sure if there's a problem with accessing data from this db if it's on >the Linux server - if there is then I'll just point the DB request to >one of the network machines. But first I need to get an adapter that >works, and so far I can't see one. Your Access mdb file is on your Linux box? I don't think you can open it there. You'll need to put it on a Windows box, then talk to it via ODBC over the network. Marc-Andre Lemburg's new and excellent mxODBC Zope Adapter will do the job. It's a bargain at $95 per Zope server. I'm using it on Windows, but have tested his mxODBC module on Linux, and it works. mxODBC enables Python to talk to the ODBC driver manager on your Linux box. There are a couple of free ODBC driver mgrs available for Linux. Then for getting your Linux box to talk to the Access box, there are one or two free projects as well as commercial products (http://easysoft.com/) If you don't need to keep the db in Access for other reasons, now would be an excellent time to take a good look at PostgreSql. You can probably get more answers on the Zope-db list. Wade Leftwich Ithaca, NY

4 3

Re: [Zope] Re: Zope digest, Vol 1 #2654 - 34 msgs
by Frederic Faure 15 Mar '03

15 Mar '03

At 13:40 14/03/2003 -0800, Dylan Reinhardt wrote: >Sounds like a great idea... when you think you've gathered enough >arguments to share, you should write it up and submit it to www.zope.org. :-) Well, just showing people that they don't have to stick an index.php in every single sub-directory of their site is a pretty nice way to get them interested. Second, having a great OOP language like Python is another plus And finally, the fact that Zope is a breeze to install and is available for different OS's as well is another plus. The only thing that might make people suspicious are performance (since I understand most of Zope is built in Python instead of being compiled for the given platform), and having to learn Python and DTML/ZPT, but it's not that big a deal. BTW, I found that playing with PHITE helped me a lot to understand how Zope worked and what added value it offered compared to eg. PHP. Fred.

1 0

VHM probing?
by Dylan Reinhardt 15 Mar '03

15 Mar '03

Hey all, Looking over the logs this morning, I'm seeing a large number of Not Found errors for requests of the form: http://www.myvirtualhost.com/vhm// (Requests included the trailing double slash... that's not a typo) I'm still looking into what else may have gone on, but it would appear that *something* is attempting to find VHM setups. This probing doesn't look like it was done by hand... there were 14 simultaneous requests at a time to different hosts, spaced about an hour apart. I got probed at least four different times. The requests were repeated in similar patterns. Without knowing anything else, it seems prudent to suggest that y'all might want to give your VHM objects a name other than the typical variants on "VHM". Since it doesn't matter anyway, why not pick something a little less guessable? I'll post more information if I dig anything up. As it stands, it doesn't appear that anything has been compromised or defaced. Is anyone else seeing this? Dylan

1 0

xml-rpc illegal characters
by Ed Colmar 15 Mar '03

15 Mar '03

I've got a xml-rpc error that has creeped in, and I'm curious what the standard procedure is for making sure this does not happen. All of these xml-rpc fields are user input areas, and are pretty much not protected. Users can enter any charaters they want... So far it has been working well, but now I've got this: Syntax error at line 4324: illegal character in content To be expected I guess... So, my question is, what are people using for stripping out these characters before sending the data over xml-rpc. Or, put another way, what characters are permitted? Should I just strip out everything that is not alphanumeric? Thanks! -e- -- Green Graphics ::: Print and Web Design ::: 510.923.0000

2 2

zope process goes to sleep
by AM 14 Mar '03

14 Mar '03

Hi, We have Zope 2.6.1 (upgraded) running behind Apache 2.0 on a Redhat 8 dual processor machine with Py 2.1.3. Its been live for quite a few days. Now every night at around 3-5 AM the server sort of stops responding. A ps -ax still shows the process running, and a ping to port 8080 on the machine returns a valid response, just that the server doesnt respond and Apache returns a proxy error. Also before that happens the apache logs show that there are not hits for quite some time. Once I restart the zope process everything sworks fine then. Any ideas as to what might be causing that? Has anybody seen that before?/ My start script: #! /bin/sh umask 077 export INSTANCE_HOME="/var/local/zope" export ZSYSLOG="/dev/log" export EVENT_LOG_FILE="/var/log/zope/Zope.log" cd $INSTANCE_HOME /usr/bin/env bin/python $INSTANCE_HOME/z2.py \ -D \ -Z1 \ -C \ -t 20 \ -z /var/local/zope \ -u zope \ -X \ -a 192.168.10.172 \ -P 8000 \ -m - \ -p - \ -f - \ -M /var/log/zope/detailed.txt \ -l /var/log/zope/zserver.txt TIA AM -- ================================================================== Aseem Mohanty Neurobehavioral Systems Inc, 828 San Pablo Ave, Albany, CA 94706 (R) 510 7696011 (M) 510 3014871 (O) 510 5279231 ================================================================== "I saw `cout' being shifted "Hello world" times to the left and stopped right there!!" -- Steve Gonedes ==================================================================

2 2