- Zope - Zope lists

Re: [Zope] Zope/PostgreSQL/PoPy. Solution v0.0.1. Author: Jim Penny
by Antonio Carrasco 24 Aug '01

24 Aug '01

Hello again. I´m at work now and I´ve tried some codes. Sorry again, I´m spanish and my english is quite bad. ----- Original Message ----- From: "Jim Penny" <jpenny(a)universal-fasteners.com> To: "Antonio Carrasco" <antoniojezu(a)hotmail.com> Sent: Thursday, August 23, 2001 11:59 PM Subject: Re: [Zope] Zope/PostgreSQL/PoPy > On Wed, Aug 22, 2001 at 11:50:05PM +0200, Antonio Carrasco wrote: > > Ok, Jim, Let?s go again... > > > > > select from Departments where name=<dtml-sqlvar name type=string> > > I tried it. > > > > > > > > Also, > > > does > > > select from Departments where name='<dtml-var name sql_quote>' > > > work? OK! It works successfully! And it seems to be a good solution. Because: "<< sql_quote Converts single quotes to pairs of single quotes. This is needed to safely include values in SQL strings. >>". From Zope Help System, DTML Reference, var. But, Why doesn´t <dtml-sqlvar name type=string> work?. I think everyone of us want to know. > > Now just a cotton picking minute. The form just above does not > reference string at all. I don't see how it can be failing on > a string error message. > > This is not suitable for production code, due to security reasons. > does > select from Departments where name='<dtml-var name>' > work? Yes, it works too. But we have the security problem. "<<In addition to avoiding errors, SQL quoting is important for security. Suppose you had a query that makes a select: select * from employees where emp_id=<dtml-var emp_id> This query is unsafe since someone could slip SQL code into your query by entering something like 12; drop table employees as an emp_id. To avoid this problem you need to make sure that your variables are properly quoted.>>" From ZopeBook. Chapter 10: Relational Database Connectivity, Dinamic SQL queries, Inserting arguments with sql-var. Anyway. <dtml-var name sql_quote> doesn´t resolve our problem because: "<< SELECT * FROM Departments <dtml-sqlgroup where> <dtml-sqltest id op=eq type=int optional> <dtml-and> <dtml-if nombre> nombre='<dtml-var name sql_quote>' </dtml-if> </dtml-sqlgroup> >>".From my code. We have to use dtml-if in all our multiple arguments queries with strings. Or is there another way to do it? > > (Make sure punctuation is exactly as shown.) > > Jim > > > > > I have tried it. > > And I have tried another ways. But nothing. I have been today two hours > > making and thinking different ways. My last try is find someone who can make > > the query without problems in this list. Farrell seems to be. But in RedHat. > > Tomorrow I?m going to write and specifie all the products version data and > > OS used(It?s Linux, but I can?t remember now more). Thanks again. Jim > > > > Antonio Carrasco > > > > > Thanks a lot, Jim and others. I wish I help all you someday. Antonio Carrasco

3 2

ParsedXML for zope2.4 on Win32
by Phil Harris 24 Aug '01

24 Aug '01

Hi all, Anyone got the thingy mentioned in the subject? tia Phil

1 0

Zope PTK
by Vishwanath Varadaraju 24 Aug '01

24 Aug '01

Hi, Please let me know as to where is the latest Zope PTK available. Regards, Vish

2 1

Re: [Zope-CMF] Re: [Zope] Persistent dictionaries
by Thomas Olsen 24 Aug '01

24 Aug '01

On Friday 24 August 2001 10:11, Erik Enge wrote: > [Thomas Olsen] > > | The problem was (I guess) that my object didn't reconize that I had > | changed the mapping so I had to call __changed__(1) on that. > > Hm. I thought it was supposed to do this for you, so that the mapping > became like any other attribute with respect to Persistence. > I think it would be pretty easy: self.aq_parent.__changed__(1) -- Regards, Thomas Olsen http://www.tanghus.dk

1 0

Treating 00:00 as hh:mm
by Michael Billimoria 24 Aug '01

24 Aug '01

Hi there, I'm having a minor problem with an SQL statement that's being called from Zope to add up some times. Basically times are entered into a database field called "timetaken" in the format of hh:mm I am trying to compile a report to add up the times and give them back in the format of hh:mm Unfortunately using SUM(timetaken) decides to truncate the characters after the ":" and not add them up as hours. Similarly using the SQL REPLACE string command to remove the ":" will then proceed to add the values as decimal values. Is there a simple way? The column itself is defined as a varchar currently, I've tried defining it as time, but it doesn't seem to work properly as it takes time as being clock time (hh:mm:ss AM/PM) Hope someone can help! Many thanks, Michael Billimoria

2 1

AW: [Zope] (no subject)
by sanket.deshmukh＠medienhaus-bremen.de 24 Aug '01

24 Aug '01

Thanks holger -----Ursprüngliche Nachricht----- Von: Holger Hoffmann [mailto:hohoff@snafu.de] Gesendet: Friday, August 24, 2001 8:26 AM An: sanket.deshmukh(a)medienhaus-bremen.de Cc: zope(a)zope.org Betreff: Re: [Zope] (no subject) Hi, sanket.deshmukh(a)medienhaus-bremen.de wrote: > > hello friends, > can u please tell me where can i find information about the zope converters. > this symbol " : " > here are some example, > > <input type="submit" name="fireEmployees:action" value="Fire!"> > > <input type="text" name="people.lname:records"></p> > > i want to know the various possible use of these converters. i couldn't find > detail information in the > zope documentation. have a look at: http://www.zope.org/Members/Zen/howto/FormVariableTypes http://www.zope.org/Members/michel/ZB/ScriptingZope.dtml ... Holger

1 0

MERLINO Nuovo Motore di ricerca Italiano
by webmaster＠merlino.xs3.com 24 Aug '01

24 Aug '01

Simatissimo Collega/Impresa, cogliamo l'occasione per annunciarle la nascita di un nuovo motore di ricerca Italiano creato dagli stessi webmaster affinchè ricevano sempre più visite ai loro siti. MERLINO offre un servizio completamente gratuito di pubblicità nel web con due tipi di iscrizioni: Un Top 50, classifica stilata in base alle visite inviate. Una directory divisa per categorie dove gli utenti stessi creeranno la classifica in base alle loro preferenze. Annunciarsi nel motore non comporta assolutamente nessun costo e ci auguriamo di inviare sempre più visite ai siti che proporremmo grazie anche all'apporto degli stessi. Un Saluto Cordiale e Buon Lavoro dallo Staff di MERLINO http://www.merlino.trading.com http://www.merlino.it-homepage.com A norma della legge sulla privacy n. 675/96 si comunica che il presente materiale informativo viene inviato a indirizzi email presenti nei vari mercatini e siti di annunci gratuiti e info trovati in internet in sezioni di pubblica visione o a indirizzi ottenuti da precedenti contatti per informazioni su siti in rapporto con la nostra società. Questa e-mail che sponsorizza un servizio completamente gratuito e promozionale, vi sarà inviata una sola volta e non ne riceverete più.

5 5

Form Variable location and persistence!
by ricardo＠cnbe.mar.org.uk 24 Aug '01

24 Aug '01

----- Original Message ----- From: "Ricardo" <ricardo(a)mar.org.uk> To: "Zope" <Zope(a)zope.org> Sent: Thursday, August 23, 2001 5:24 PM Subject: Form Variable location and persistence! > Hi, > > I have a input variable 'username' in a form. > This form call a DTML method that call a stored procedure to check > for user autorization. > When the user login it will be send to a main page with a navigation frame > and a main frame. > The main frame will reder all modules that this user will be able to use. > > My problem is that I have to pass the 'username' entered in the first form > to this modules selection DTML method > but Zope can not find the username parameter. > > I have tried the examples in Chap 7 of The Zope Book but it doesn't work. > > Does anyone knows how to do that. How can I create persistent variable in > Zope? > If I need to use cookies how can I do that in Zope? > > TIA > > Regards, > > > Ricardo >

1 0

gvib kinterbasdb firebird linux
by W. Robert Kellock 24 Aug '01

24 Aug '01

I have for some months now been utilising, very successfully, gvibDA on Windows 2000 with Zope 2.3.2 and Firebird. Unfortunately I cannot say the same for RedHat 7.1 (very much a Linux newbie so be gentle ;- ). I have installed the latest Zope 2.4.1b (which uses Python2.1) and Firebird binaries and they are working fine. However when I compile gviBase.so and attempt to use it within Zope or Python (both 1.5 rpm and 2.1.1 compiled from source) I get Import error: undefined symbol isc_dsql_execute I assume this means that the compile process cannot see the Firebird shared library libgds.so, but I can't see why. I have tryed to edit the Setup.in file to import /usr/lib/libgds.so instead of the more usual -lgds but it makes no difference. Can anybody help me out? I have also tryed kinterbasdb, but when I import it I get Import error: undefined symbol crypt I know I'm supposed to editing kinterbasdb's Makefile to include -lcrypt but I'm not sure where. gvib is my main priority, but a copy of an appropriate Makefile for kinterbasdb would also be much appreciated. Thanks. ------------------------------------------------------------------------------------------------------------- W.Robert Kellock Ph: +64 3 326 6115 Sales Manager Fax: +64 3 326 6115 Credit Systems Control Ltd Web: www.creditscore.co.nz "making decisions easy" -------------------------------------------------------------------------------------------------------------

1 0

Created by time stamps...
by Rustad, Aaron 24 Aug '01

24 Aug '01

Can anyone tell me how to remove the "Created by..." time stamps that appear at the top of each CMFDefaultContent. Thanks! AR.

1 0