- Zope - Zope lists

RE: [Zope] how to capture the referring URL??
by Oliver Bleutgen 03 Sep '01

03 Sep '01

>> Don't use referring url ;-) >> Seriously, it depends of your problem, but it may be solved by using >> some kind of user sessions... >> >> If you could explain more your problem, maybe someone could find another >> solution? > Here is a shot at what I am working on. > This is an "Email to a Friend" thing. > Thanks to anyone that can get me in the right direction. And explain why > I > shouldnt use HTTP_REFERER. Using http_referer for more than statistcal reasons is a generally problem because of two reasons: 1. security-wise: Never trust the client! The browser constructs the referer information and it can send for that whatever it wants to. So it makes no sense to try to prevent malicious users from doing something based on the referer header of their browser. Sites like geocities etc. try to hinder direct linking to binary files on their site by requiring a local (for them) referer. This is why various download utilities allow to set a custom referer header. 2. it may not function Apart from security considerations, which might not be important in your case, various proxies strip referer information for privacy reason, so that they don't show up in logfiles etc.. So point 2 seems more important in your case. But you seem to be in control of the page which link to your "Email to friend" form. If these pages are also in zope, you could easily pass the "referer" information to that form, i.e. <a href="link_to_email_to_friend_form?url=<dtml-var URL0 url_quote>">email this page to a friend</a> To sum up, using the referer header is not adviced for security uses only, for others it's just not optimal, IMO. cheers, oliver

1 0

how to capture the referring URL??
by Trevor Toenjes 03 Sep '01

03 Sep '01

another newbie Q... I am trying to figure out how to capture the PREVIOUS URL in a variable. It looks like I need to do something with PARENTS and absolute_url. What is the proper syntax? Thanks, -Trevor Toenjes

4 6

Re: [Zope] GUF & SQL login problems
by Milos Prudek 03 Sep '01

03 Sep '01

> > can't you just get your SQL-backend to log/print out the SQL-queries it > gets from your GUF? This is what once helped me to figure out a similar > problem with loginmanager. Is it possible with PostgresQL? -- Milos Prudek

1 0

SQL authentication
by Milos Prudek 03 Sep '01

03 Sep '01

I'm trying to implement a SQL-based login. It looks more difficult than I anticipated. Here's what I need: - Zope based web system where anonymous users can register. - Registered users should be able to login using a web form. - A free webmail system using the IMP. IMP is PHP-based, so I guess I must use SQL for my user list in order to share user info among Zope and IMP. LoginManager is unfinished, documentation is too sparse. Also it was last released more than a year ago, so I'm not sure whether it's being developed. GUF has good docs but I have problems implementing it. I'm looking for the easiest solution. Something that is well documented, including examples. -- Milos Prudek

3 5

change AUTHENTICATED_USER by script
by Gilles Lenfant 03 Sep '01

03 Sep '01

Hi, I need too change the AUTHENTICATED_USER / AUTHENTICATION_PATH with a script (means: without switching to a protected page that raises the classical basic authentication box) Any hint ? Thanks in advance --Gilles

1 0

when to opt for a backend DB over ZClasses?
by dedmundson＠bigfoot.com 03 Sep '01

03 Sep '01

I've done a number of smallish Zope sites that make heavy use of ZClasses and ZCatalogs. Now I'm involved with a project where we need to create (and search over) millions of objects. Even though the objects are relatively lightweight (just a few floats and strings), should we be using a backend database rather than ZClasses? This comes up a lot in the archives, but I've never seen a clear exposition of when one should forego the beauty of ZClasses for a more traditional (backend) storage. Cheers, Darran. --------------------------------------------- This message was sent using Endymion MailMan. http://www.endymion.com/products/mailman/

4 5

RE: ZSQL method and database connection acquisition
by Frederic Quin 03 Sep '01

03 Sep '01

Hi Jon, I had the same problem as yours. What I did it's adding my two folders at the root folder, naming then like my database names. Then, I added the same Z SQL Methods in the two folders. In that way, I call the Z SQL Methods like this: <dtml-in "DBName_1.SQLMethod_1()">...</dtml-in> Regards, Frederic

1 0

RE: [Zope] Good Use for Zope?
by sean.upton＠uniontrib.com 03 Sep '01

03 Sep '01

Since barcodes are always unique numbers, you are likely to find that you would have good luck using keyboard-based barcode readers and a simple web form. In Zope, you could set up a BTree Folder that contained all your book records as some sort of object; the object id for your books would be the barcode, and you could use ZCatalog to catalog all the info, and enable barcode searches very easily. I imagine you could do this in ZClasses if you wanted a quick and easily solution, and you wouldn't have to mess with using a relational database; the upside to this setup is that all your data would be web-maintainable... Also, I think someone hacked some code to decrypt those lame CueCat barcode scanners to work in Zope; the encrypted text would be input into a text area, and when submitted, they would return the correct barcode... Sean -----Original Message----- From: Leland Myrick [mailto:leemyr@ix.netcom.com] Sent: Friday, August 31, 2001 4:26 PM To: Zope(a)zope.org Subject: [Zope] Good Use for Zope? I'm new to Zope but I'm excited by its possibilities. I'm going to be doing some contract work to setup a database for a high school resource center. The basic idea is that all the materials available for the teachers to checkout (book sets, vidoes, math materiels, etc.) would be on the database and would be set up with a barcode system and wand for quick checkout, much like any lending library. The nice part is that every teacher is already connected on an ethernet lan, so I want to set it up so that they can search the database from their classrooms without having to trudge across the campus only to find out that what they were looking for isn't in the system or has been checked out. The first ideas of the school personnel were filemaker or access. I definitely am not doing access. The point is, has anyone done a barcode checkout system on zope? Good idea? leland myrick _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

2 1

Solution to force authentication (was: getting index_html instead of manage_main in some browsers)
by Dominique.Dutoit＠cec.eu.int 03 Sep '01

03 Sep '01

Some browsers (OmniWeb, iCab) don't preemptively send the authorization header and so they are authenticated as an anonymous user in the ZMI. The result is that the ZMI frames are displayed but the file manager is not. But I've found a way in Zope 2.4 to ask the browser to send the authorization header. Just edit line 139 of App/Management.py from manage_workspace__roles__=('Anonymous',) to manage_workspace__roles__=('Authenticated',). I don't know if there's any issue by changing this line...

1 0

NT Auth acl_users
by Chris Withers 03 Sep '01

03 Sep '01

Hi, Is there a stable acl_users implementation anywhere that can be used to get usernames and passwords from an NT server? cheers, Chris

1 0