- Zope - Zope lists

RE: [Zope] Responding to hackers
by Passin, Tom 25 Oct '02

25 Oct '02

[Dylan Reinhardt] > > I'm sure we've all seen our servers get scanned repeatedly for > vulnerabilities in other systems. A quick check through the > error logs > show some obvious examples of this, including requests for: > > /_vti_bin > /scripts > /MSADC > /MSOFFICE > > Etc, etc. > > Almost inevitably, these requests come in bursts, typically > from the same IP. > > All of these calls are currently getting the customary 404, > but I wonder if > there's anything more intelligent or proactive to be done. > I've thought > about building myself a hosts-deny kind of solution using > external methods, > but I'm not sure that's necessarily going to save me very > many cycles in > the long run. > Trouble is, the same infected computer does not usually return to your server all that often, and there are a lot of infected computers out there. I do not think it is normally much of a problem. You get a little burst, then later another little burst. Not that much traffic, at least as things stand now. No worse than serving a page with a haalf a dozen images in it, which lots of people do. Of course, a new worm could change the picture tomorrow... Cheers, Tom p

1 0

zope web statistics products
by Hamzat Kamal 25 Oct '02

25 Oct '02

Hi, Pls i need your recommendation on most efficient zope web statistics products. Pointer to this request will be highly appreciated. Thanks ===== Hamzat kamaldeen Ishola Dnet Systems Limited. 223 Ikorodu Road, Lagos. Nigeria. 234 1 7749381, 234 08033011305 --- If Mistake is an opportunity to see better,�then do not fear it, but ready to admit it. NOTE: Sentimental decisions are not mistakes but failures !!!� __________________________________________________ Do you Yahoo!? Y! Web Hosting - Let the expert host your web site http://webhosting.yahoo.com/

1 0

Re: [Zope] No unsaved work... & versionFTPServer
by Chris Withers 25 Oct '02

25 Oct '02

Jaroslav Lukesh wrote: > Hi all, > > I use versionFTPServer with Zope251/Win32. Short answer, don't. Versions are crufty enough. Combining them with FTP is asking for trouble :-( cheers, Chris

1 0

exUserFolder
by Schmidt, Allen J. 25 Oct '02

25 Oct '02

Ok, I got curious and dropped this into a new, test install of 2.6 on a Windows 98 box and using MySQL. I created a test folder and dropped a new instance in it. Using a MySQL user table with about 2000 users in it, I changed the zsql methods to reflect the column name change from the default of username. I basically accepted the defaults when possible. After all that, it seems to work. Shows all the users and I can look at them individually. We are starting to implement a site membership/registration system into our very large, production site. We use a variety user auth systems now...one of them using SQLSession to keep track of a user being logged in and our own forms, etc. to handle the login and stuff. Also run a UBB forum and it also has a MySQL users table with its own cookies and stuff for keeping track of auth status. Question: I think XUF will work great for us. Comments on how well it will work using the new built in session stuff to handle the new membership/registration system? We will be adding lots of stuff we want to maintain about each user: preferences, bio/demo type stuff, opt in email prefs, etc. We will need to tie all this to the login. So when a user sees any page on our site, they will either see a link to login/register or text showing that they are logged in and a link to change their preferences. Major areas of the site will have custom pref pages relating only to that section. Sorry for the length...but just needed to throw this out and see what comes of it. Maybe just talking out loud to myself but hopefully someone will have suggestions or comments.... Thanks!!! -Allen

1 0

Re: [Zope] Idea of Caching DTML Methods in Zope SOLVED
by Jaroslav Lukesh 25 Oct '02

25 Oct '02

| Odesílatel: Tino Wildenhain <tino(a)wildenhain.de> | --On Mittwoch, 23. Oktober 2002 11:26 +0100 Jaroslav Lukesh | > localroot | > <dtml-in "PARENTS[3:]">../</dtml-in> | I dont think your example serves very well because the cache | lookup would be comparable to this simple calculation, may | be the cache lookup is even costyer. It is cca 2-3 times faster when it is cached (p-233MMX, W95, MSIE4 and Zopeserver at same machine). | You can define one or more request variables as "key" for different | object versions (RAM Cache manager), so you can use PARENTS here | as well. Thanks, it works. meanwhile I was try absolute_url and it works too. I think that absolute_url is more accurate than PARENTS that could fail in some special case. | > I have few hundreds of calling localroot per page and I will be hapy if it | > will have some solution for that. I dont want migrate to siteroot because | > it makes absolute URLs, not relative. | | if localroot is a python script, you could use something like this: I do not know zope-python. I am procedural, not object programmer and zope-python is too hard for me. | Further, you are constructing links like | <someroot>/more/path/elements | | Do you think this is useful? No ;-) but I does not have something better. | You could either use /path/from/your/root (without servername) Because I have lang versions (/www/www.domain.com/en etc.), it is not good. I was try /* linking, but it failed in some case. Sure, it could have domain en.domain.com or so... | or object_to_link_to.absolute_url() object_to_link_to should not be ../../folder1/folder2/ - but sure, due acquisition you could that link as folder1/folder2/ But it is not clean. Many thanks, JL.

1 0

Re: [Zope] Idea of Caching DTML Methods in Zope
by Jaroslav Lukesh 25 Oct '02

25 Oct '02

| Odes�latel: Elena Schulz <elena.schulz(a)gmx.net> | if there is no other caching-possibility maybe creating and using a special | folder-object as a subobject of the standard folder-object with a property | of the wanted info, i.e. PARENTS[3:], which changes whenever the folder is | created and copied elsewhere in the hierachy is a solution. Yes, it is possible. But if you hae users that create directories and files from FTP, it is not as easy. I have web structure, where full content of each folder is rendered into single page (exclude news section, here are special things with expiring and archiving). | Maybe it can be achieved with the products "AbacadabraObject" and | "PropertyFolder" ... | To my knowledge it is possible to add a script (i.e. localroot.py) as a | zope-property, at least for the property-types "multiple selection" and | "selection". It sounds interesting and I take look at that two porducts, but for this web philosophy I prefer to make web transparently accessible via FTP. It will be maybe time, when I write better management interface for our web-fillers than ZMI (with MSIE inline editor) and FTP, but for now it is OK and I have no time for that. The way to do that caching is to use RAM cache with defined 1* REQUEST variables (global) it is somewhere reccomended to put here "AUTHENTIFICATED_USER" (all authenticated access will be separated from anonymous) 2* Names from the DTML namespace to use as cache keys (cache properties for concrete cached DTMLmethod) I find that is to set here "absolute_url" (all called object will have own cached copy) 2* works exactly as I need and it is very FAST. So it is question, that it should be filled as default or make tip in help text? Yes, it will be rendered at each level of folder/object, but only at first access. Maybe RAM consuming... Regards J. Lukesh.

1 0

Re: [Zope] Database Adapter for ODBC Socket Server
by Bob Corriher 25 Oct '02

25 Oct '02

Hi Roland, I used ODBC Socket Server for a project a year or so ago (not as a Database Adapter however). I found several problems with it which caused me to rewrite the site to use SQL-Server's XML access method. ODBC Socket Server had problems returning larger result sets, (the number of rows depended on the size of the row data). Also, it tended to run away and stop responding until the service was restarted. Also, it showed some evidence of memory creep. This is just my experience, and I don't know if ODBC Socket Server has been worked on/improved since then. Bob Corriher P-Wave Inc.

1 0

alternative to ThreadSageCounter
by cyrille 25 Oct '02

25 Oct '02

Hello, for make incremental counter in Zope I use ThreadSafeCounter. But I found that product a longtime ago (Zope 2.4.1). I would like to know if now it exists a Zope builtin that it can make incremental count and be Thread Safe. Is there ? If not, Why don't incorporate a ThreadSafeCounter like in Zope ?? I think a incremental counter is different than a unique id. - unique id like : eZ4J8RE8ZFzKop - incremental counter : 12345678 you can see that counter is more Human reusable, like accounting, facturing. Another exemple : using counter for naming uploaded files, done that in monthly log it' easyer to find them. blablabla ... ;o) cheers, Cyrille

1 0

Log Rotation
by cyrille 25 Oct '02

25 Oct '02

Hello, How do you handle da Log Rotation like Apache & logrotate ?? I use to make a monthly rotation & compression. Thanks for tips & comment Cyrille

5 5

art database
by Oliver Marx 25 Oct '02

25 Oct '02

Dear List I'm looking for a product to build an art database with. In some sense it is just an image database where each image has some meta data. Any suggestions? ZPhotoAlbum? \Oliver

3 4