- Zope - Zope lists

Security questions all around.
by Alec Munro 28 Jan '03

28 Jan '03

Hi all, I've got a bundle of possible security questions. First off, I am trying to do credit card processing. The way I have it set up I have a few possible ways to do this, each with their own roadblock. First off, and the way I would ideally like to do it, since I have invested the most time in it, is calling a python script that would make an HTTPS connection to the payment gateway, process the returned information, and give the user some feedback. A plus of this method is that the user never leaves my site. The current problem is my limited understanding of SSL. I get a SSL_CTX_use_PrivateKey_file error, raised in the httplib module. Second, I can have the user submit the data directly to the payment gateway, and allow the payment gateway to redirect them back to a summary page. The problem is then confirming that the user is actually being redirected. My payment gateway returns the data signed with PGP, but I have almost never worked with PGP, and I would have little idea where to start. Any help at all would be appreciated. Thanks, Alec Munro

2 2

From development to production ??
by Thierry Florac 28 Jan '03

28 Jan '03

Hi, I have a probably common question. My problem is simple : I'm working in a development environment (a specific Zope server) on a web site powered by several Zope products, as well as several DTML methods and Python scripts (which have to be available to webmasters for customization). When I want to upgrade my production system with a new release of my web site, Zope products can be upgraded easilly, but it's a huge job to upgrade DTML methods and Python scripts, as I can't do an export/import operation... Is there any good way to handle such tasks ? Could the new "Revision Manager" product (or anyone else) be of any help for this job ?? Thanks for any help, Thierry -- Linux every day, keeps Dr Watson away... http://gpc.sourceforge.net -- http://www.ulthar.net

4 7

copy / paste - paste checking for valid objects
by philrobinson 28 Jan '03

28 Jan '03

I allow people to copy various kinds of objects to the clipboard (using manage_copyObjects()) using a cookie. If 'cb_dataValid', then I present a button to let them 'manage_pasteObjects()' back again. But I want to restrict what objects they can paste back out depending on where they are trying to paste it. For example, they might have copied an object of type 'a', which can meaningfully be pasted back into location 'b' but not location 'c'. So I want my paste button to appear when context is 'b', but not when it is 'c'. It seems to me that I need a way to check the clipboard contents in addition to just cb_dataValid. Any ideas? Thanks in advance... Cheers. -------------------------------------- Phil Robinson. philrobinson(a)ponytrot.net --------------------------------------

2 1

Calendar Crashes
by Philip Swann 28 Jan '03

28 Jan '03

I am a newbie and this is my first message to this list. I managed to install the latest version of the Calendar Product and got it working ok. A few hours later my Management interface disappeared and the ZSever died with an error message involving a file descriptor. I tried restarting several times. In the end I reinstalled the whole thing. Everything seems to be working ok. Is this usual? ===== Philip Swann, Les Grands Chenes, 10, ch. Magny, 01280 Prevessin, France -- mobile: +33 611 754429 -- home: +33 450405085 -- philip.swann(a)arunasoftware.com -- philip_swann(a)yahoo.com __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com

2 1

RE: [Zope] Re: Hyperlink within email
by McDonnell, Larry 28 Jan '03

28 Jan '03

Thanks Maik, I'm stuck with MS Outlook and I do not have a choose. This is just internally anyway. Thanks again it works. -----Original Message----- From: zope-admin(a)zope.org [mailto:zope-admin@zope.org]On Behalf Of Maik Jablonski Sent: Tuesday, January 28, 2003 11:38 AM To: zope(a)zope.org Subject: [Zope] Re: Hyperlink within email McDonnell, Larry wrote: > Hi, > > I just purchased the "Book of Zope" while at the Linux Expo in New York and > I was trying to add a hyperlink within the Zope's sendmail. But all I see in > the email is the text if the link. I tried the example but still no luck. > Any help would be great, thanks in advance. > > <dtml-call "REQUEST.set('originator', REQUEST.SESSION['originator'])"> > <dtml-call "REQUEST.set('capa_report_no', > REQUEST.SESSION['capa_report_no'])"> > <dtml-let sender="'lmcdonnell(a)protonenergy.com'" > > <dtml-sendmail mailhost="MailHost"> > To: <dtml-var sender>, > From: <dtml-var sender> > Subject: Corrective Action Report Update <dtml-var capa_report_no> > test message > > <dtml-comment> The following is a test message</dtml-comment> > <h1>A Corrective Action Report-</h1> > <a > href="http://prointranet:8080/corrective_action/view_capa_form2?capa_report_ > no=<dtml-var capa_report_no>" target="_blank">CAR<dtml-var > capa_report_no></a> has been updated. Please review the report. > <br><a href="http://prointranet:8080/corrective_action/index_html" > target="_top">Go To Corrective Action Menu</a></br> > </dtml-sendmail> > > </dtml-let> Your problem has nothing to do with Zope at all... You'll want to send a HTML-Mail, but you send only a plain-text-mail. You have to options: 1) Be kind to your customers and stay on plain-mail-mode. Insert the hyperlinks as they are: Most email-clients will render them as hypertext automatically ... => http://www.zope.org 2) If you want to insist on sending HTML-Mails (booo..;), add something like: <dtml-sendmail mailhost="MailHost"> To: <dtml-var sender>, From: <dtml-var sender> Content-type: text/html Subject: Corrective Action Report Update <dtml-var capa_report_no> to your mail-header... Cheers, Maik _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Hyperlink within email
by McDonnell, Larry 28 Jan '03

28 Jan '03

Hi, I just purchased the "Book of Zope" while at the Linux Expo in New York and I was trying to add a hyperlink within the Zope's sendmail. But all I see in the email is the text if the link. I tried the example but still no luck. Any help would be great, thanks in advance. <dtml-call "REQUEST.set('originator', REQUEST.SESSION['originator'])"> <dtml-call "REQUEST.set('capa_report_no', REQUEST.SESSION['capa_report_no'])"> <dtml-let sender="'lmcdonnell(a)protonenergy.com'" > <dtml-sendmail mailhost="MailHost"> To: <dtml-var sender>, From: <dtml-var sender> Subject: Corrective Action Report Update <dtml-var capa_report_no> test message <dtml-comment> The following is a test message</dtml-comment> <h1>A Corrective Action Report-</h1> <a href="http://prointranet:8080/corrective_action/view_capa_form2?capa_report_ no=<dtml-var capa_report_no>" target="_blank">CAR<dtml-var capa_report_no></a> has been updated. Please review the report. <br><a href="http://prointranet:8080/corrective_action/index_html" target="_top">Go To Corrective Action Menu</a></br> </dtml-sendmail> </dtml-let> Larry McDonnell Proton Energy Systems 10 Technology Drive Wallingford, CT 06492 (203) 678-2181 Email:lmcdonnell@protonenergy.com www.protonenergy.com

2 1

rendering a complete HTML file
by Pablo Gomez 28 Jan '03

28 Jan '03

Hello zopers! I am new at this list (hello everybody!) and quite new at Zope. After my first steps in using Zope, I am developing a small simple app that should show the content of a HTML file to the user. I have met a problem that might be easy for others but leaves me stucked. This is the explanation. There is a DTML-method (arbol_html) that includes <dtml-in expr="objectValues('File')"> <a href="showdoc_html?htmldoc=&dtml-id;" ><dtml-var title_or_id></a> </dtml-in> As you can see it invokes showdoc_html that should render the HTML file content. I have tried several methods but none is satisfactory. Of course I am opened to the idea of changing the URL calling method. Perhaps it's time to use python scripts yet I still feel myself uncomfortable with python :-( Any help is valuable. Thanks in advance Pablo Gomez

3 2

calling manage_deleteObjects within an objectManager sub-class
by Dave Hall 28 Jan '03

28 Jan '03

I'm having trouble calling manage_deleteObjects within an ObjectManager sub-class. Specifically, I get an Unauthorized exception in _verifyObjectPaste out of CopySupport. Basically I'm trying to make a copy of an object and then subsequently rename it. I've searched the lists and found references to similar problems but no solutions. Any ideas/pointers are appreciated. Thanks, Dave

3 3

Apache, VirtualHostMonster and complex rewriterule
by Gilles Lenfant 28 Jan '03

28 Jan '03

Hi, I'm trying to make some complex RewriteRule to map : http://nick1.mydomain.com/pathx -> Zope /nick1/pathx http://nick2.mydomain.com/pathy -> Zope: /nick2/pathy ... I thought I had some skills in that matter but... <VirtualHost *> ServerName *.mydomain.com RewriteEngine on RewriteRule ^(.*)\.mydomain\.com/(.*) http://localhost:8080/VirtualHostBase/http/%{HTTP_HOST}:80/$1/VirtualHostRoo t/$2 [P,L] </VirtualHost> ... doesn't work I inspected the Z2.log and found that the second group matches when the first does'nt : When getting http://foo.mydomain.com/bar , the path in Z2.log is : /VirtualHostBase/http/foo.mydomain.com:80//VirtualHostRoot/bar ...when I expected... /VirtualHostBase/http/foo.mydomain.com:80/foo/VirtualHostRoot/bar Can somebody help ? What's wrong in the RewriteRule pattern ? Many thanks in advance. --Gilles

5 10

SiteRoot or VirtualHostMonster
by Marc Roland 28 Jan '03

28 Jan '03

What is the difference between these two Objects? When to use which of them? -- Best Regards, Marc Roland AICAT CA Technologies GmbH Dipl.-Ing.(FH) System Consultant Friedrich-Karl-Str. 101-103 Fon:+49/(0)221/971445-0 Fax:-5 Germany-50735 Koeln (Niehl)

3 3