- Zope - Zope lists

Python Script problems: attribute-less object (assign or del)
by Richard Ettema 07 Jun '01

07 Jun '01

Hi, I am trying to create a python script which gathers info from a sql database using get_items (a ZSQLMethod). The first thing it needs to do is if item.name is empty, give item.name the value of item.name2. I get the following error msg when running the complete script, Error Type: TypeError Error Value: attribute-less object (assign or del) the assignment of name2 to name is the problem but I don't understand why. Can someone point me in the right direction please. for item in container.get_items(): if item.name=='': item.name = item.name2 Thanks for your help Richard

2 1

Major security flaw in Zope 2.3.2
by Jerome Alet 07 Jun '01

07 Jun '01

Hi, first I'm sorry if this is a well known problem. Anybody who can read the file Data.fs (or Data.fs.old) can also do whatever he wants on your ZODB. explanation: it seems that Zope 2.3.0 and 2.3.2 store passwords in clear text in the ZODB !!! The following is only partially tested, but should work: Say someone has a local unix account on your Zope server (don't know for NT, but I think the problem is still there), and has readonly access to the Zope/var/Data.fs file. Then he just installs Zope on his own machine, and put the stealed Data.fs file there, and use the emergency user facility to access to it. Then he just have to put an External method in the root which does: --- CUT --- for username in self.acl_users.getUserNames() : user = self.acl_users.getUser(newusername) clearpassword = user._getPassword() # do something with username/clearpassword --- CUT --- The user has now a list of username/passwords to access YOUR ZODB's root from everywhere, and can do whatever he wants. Setting rw------- permissions on Data.fs may help, but not in all cases: if Data.fs is owned by nobody.nogroup, Apache is installed on the same machine, and the user can run his own cgi-scripts (most ISPs I suppose), then by default the user's CGI scripts will run as nobody too, allowing him to read Data.fs during his own CGI execution, and copy it wherever he wants during this time. Solutions: * make Data.fs and Data.fs.old only readable by a user every other user on the system can't run commands as. * But the best to do is: Encrypt all passwords in the ZODB. hoping this helps. bye, Jerome Alet

8 10

Re: [Zope] Several domains and one Zope
by Gitte Wange 07 Jun '01

07 Jun '01

On Wednesday 06 June 2001 16:55, you wrote: > Look at this for an example of one way to do it: > http://twsite.bizland.com/twzop0015.htm Well I don't get any errors and I havent locked myself out but ... it doesn't seem to work. My HostsTable contains the 2 following domains: www.mmmanager.dk:8080 www.mmmanager.com:8080 But when I enter the sites, I just get main Zope start page. Gitte > > >>>-----Original Message----- > >>>From: Gitte Wange [mailto:gitte@mmmanager.org] > >>>Sent: Wednesday, June 06, 2001 9:26 AM > >>>To: zope(a)zope.org > >>>Subject: [Zope] Several domains and one Zope > >>> > >>> > >>>Hello, > >>> > >>>I am sure that this question have been asked a thousand > >>>times, but I am not > >>>sure what to search for in the archives and the > >>>documentation so here goes: > >>> > >>>How do I set up several domains in the same Zope ? > >>>I know there is a lot of Products (e.g. VirtualSiteHost, > >>>VirtualSiteMonster > >>>etc.) but I'm not sure of which one is the best to use. > >>> > >>>Anyone with good ideas ? > >>> > >>>Regards, > >>>-- > >>>************************ > >>>Gitte Wange Jensen > >>> > >>>System Squid Developer > >>>MMManager Aps > >>>+45 29 72 79 72 > >>> > >>>gitte(a)mmmanager.org > >>>************************ > >>> > >>>_______________________________________________ > >>>Zope maillist - Zope(a)zope.org > >>>http://lists.zope.org/mailman/listinfo/zope > >>>** No cross posts or HTML encoding! ** > >>>(Related lists - > >>> http://lists.zope.org/mailman/listinfo/zope-announce > >>> http://lists.zope.org/mailman/listinfo/zope-dev )

3 4

RE: [Zope] Refresh-Product
by Max Møller Rasmussen 07 Jun '01

07 Jun '01

> From: Arenz, Ralph [mailto:Ralph.Arenz@friatec.de] > After i had refreshed my own product for a few times > (without any changes of the .py file) , it > appears as a multiple entry in the add-Product list box. > If i restart the whole zope, what i would prevented, the > multiple entries > will reduce to one entry. > > Has anybody an idea what's going on? Nothing serious. Just ignore it. You can select any of the products in the selectbox and it works fine. It's just ugly that is. Version 2.4 will have the "refresh" functionality build in (YAHOO!!!) so just be patient. I trust that it will not have that problem. Or try and download the current Beta. regards Max M

1 0

RE: [Zope] one step closer to connecting Zope to MySQL
by Horst Wald 07 Jun '01

07 Jun '01

Hi! Do a find for the >_mysql* (dont actually think there is a _mysql like that but other files >with an appendation) and then you can try putting with the operative python I already did. I have no _mysql or _mysql.so, only ./usr/zope/lib/python/Products/MySQL-python-0.3.5/_mysql_const ./usr/zope/lib/python/Products/MySQL-python-0.3.5/_mysqlmodule.c the first of which is a directory and the second a C-source-file (so both are not the ones I need) Do I really have to install Zope from binary? Can't I just download that stupid _mysql or _mysql.so file from somewhere and place it in blablabla/python1.5/site-packages? Horst _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

2 1

Re: [Zope] one step closer to connecting Zope to MySQL
by Horst Wald 07 Jun '01

07 Jun '01

Hi! >I did an installation more or less like you did. >My mysql executable is in >/usr/lib/python1.5/site-packages/_mysql.so Like Paul Zwarts advised me, I made a " find / -name _mysql* ". Result: I have no _mysql or _mysql.so, only ./usr/zope/lib/python/Products/MySQL-python-0.3.5/_mysql_const ./usr/zope/lib/python/Products/MySQL-python-0.3.5/_mysqlmodule.c the first of which is a directory and the second a C-source-file (so both are not the ones I need). So the problem seems to be reduced to the simple question: how do I get _mysql.so? How did you? Yours Horst _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

1 0

AW: [Zope] one step closer to connecting Zope to MySQL
by Tobias Laabs 07 Jun '01

07 Jun '01

Hi Horst, were you using the precompiled Zope package or not ? If you use the precompiled package you should find the following directory: /usr/zope/lib/python1.5/ You hav (successfully) installed the MySQL-python package to /usr/lib/python1.5/site-packages (even without noticing that fact ....) now all you need to do is this: cd /usr/zope/lib/python1.5 ln -s /usr/lib/python1.5/site-packages . # mark the dot ! restart your zope - Holle > -----Ursprüngliche Nachricht----- > Von: zope-admin(a)zope.org [mailto:zope-admin@zope.org]Im Auftrag von > Horst Wald > Gesendet: Donnerstag, 7. Juni 2001 13:41 > An: zope(a)zope.org; website-talk-admin(a)list.ora.com > Betreff: [Zope] one step closer to connecting Zope to MySQL > > > Hi, > > thanks to all the help I got, I'm a lot closer to connecting > Zope to MySQL > now and I think I know where the problem is. I have: > > - started with Suse Linux 7.0 > - installed Zope 2.3.2 > - installed MySQL 3.22.32 and Python 1.5.2-something with YAST > - downloaded and installed MySQL-python-0.3.5, ZMySQLDA-2.0.6 > as stated > in the ebook I bought myself > - downloaded and installed Distutils-1.0.2 > - tried to compile the MySQL-python-0.3.5 > - got the error message: > > Traceback (innermost last): > File "/usr/zope/lib/python/OFS/Application.py", line 528, in > import_products > product=__import__(pname, global_dict, global_dict, silly) > File "/usr/zope/lib/python/Products/ZMySQLDA/__init__.py", > line 91, in ? > import DA > File "/usr/zope/lib/python/Products/ZMySQLDA/DA.py", line 91, in ? > from db import DB > File "/usr/zope/lib/python/Products/ZMySQLDA/db.py", line 89, in ? > import _mysql > ImportError: No module named _mysql > > I took a look at /usr/zope/lib/python/Products/ZMySQLDA/db.py > and it says in > line 89: "import _mysql", hard coded. Which explains the > error: I found no > such file on my computer. So it seems, I still have to > install something, > right? What is it? > > I'll have a beer on you all when it works, promise! > > Horst > ______________________________________________________________ > ___________ > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Access to AUTHENTICATED_USER from Pythonscript ?
by olpa＠sybcom.de 07 Jun '01

07 Jun '01

Hi Zopers, is there a simple way to access AUTHENTICATED_USER from a python script. I tried context.AUTHENTICATED_USER but did not work. An option is to give AUTHENTICATED_USER as an argument, but is there another (shorter) way ? Is there a javascript or java applet out of there able to generate HTML-Tags so we can incorporate it into a CMS and giving the user a more comfortable interface to play with ? Look for calvin, pray for his return and don't feed the fish... oliver --- "I'm a simple man with complex tastes." -Calvin --- Oliver Pabst .-------------------------. mailto:olpa@sybcom.de : : phone :+49 681 56600600 : project department : SYBCOM GmbH fax :+49 681 56600660 : : http://www.sybcom.de

3 2

http://mail.gnome.org/archives/gnome-hackers/2001-May/msg00350.html
by Chris Withers 07 Jun '01

07 Jun '01

Hey Owen :-) Someone posted a reference to this on the Zope list: http://mail.gnome.org/archives/gnome-hackers/2001-May/msg00350.html We care what you think so I thought I'd mail you back :-) How the new version of Squishdot holiding up? What versiosn of Zope and Squishdot are you using nowadays? > the latest versions a few weeks ago. (It still leaks memory slowly, > but other than that seems to be staying up.) If you could provide some stats on this and are interested in fixing it, tell the people on zope-dev(a)zope.org, they'll help you fix it :-) IIRC, there's a Zope product called LeakFinder for finding just these sorts of things :-) http://www.zope.org/Members/hathawsh/LeakFinder > - You basically do everything by editing the site live Not sure what you mean, have you tried out Zope Version objects? > - There is no version control over the content and scripts in an obvious > simple way. (The site isn't in CVS) Well, it being a transactional database you can go back as far as you want. Check out the history tab on most of the objects... (Squishdot does have one, it's just not in the row of tabs...) > - I'd have some concerns about performance if it was handling every > page on gnome.org - it is in Python in the end. It isn't. The core stuff is in C ;-) Do you have an impression that Python is slow? > - It's complicated. It does a lot ;-) But yes, it can be more complicated than it needs to be... > And not well documented. http://www.zope.org/Documentation http://www.zope.org/Members/michel/ZB http://www.zope.org/Documentation/ZDG http://www.zope.org/Members/michel/ZB/AppendixA.dtml http://www.zope.org/Members/ZQR http://www.zope.org/Documentation/How-To There's also the online help system that's part of the Zope management interface. Is there something in particular that's not documented? Well, let me know how things go on. I'm obviously biased but I'd like to find out what it is that makes you uncomfortable about Zope.. cheers, Chris

1 0

FREE Phone + FREE Shipping + $50 Mail-In Rebate
by Paradigm Wireless 07 Jun '01

07 Jun '01

Dear Regtfregw, Congratulations! YOU HAVE BEEN SELECTED TO RECEIVE A FREE CELL PHONE with FREE shipping and handling and FREE accessories! CLICK or copy and paste the link into your browser NOW! http://www.etracks.com/r/r0.4?HW6mOq7INVja4AHK1Ps5AQXjXOniwKoTl379 This offer comes to you from Paradigm Wireless, the nation's largest authorized dealer of AT&T Wireless Services. Respond within one week, and you will receive the Ericsson T19LX, a state-of-the-art digital cell phone, for FREE. Shipping and handling is included and you will also get a FREE belt clip, FREE ear bud, and the following FREE features: voice mail, text messaging, and caller ID. All at no charge to you! Special added attraction-$50 mail-in service rebate included with activation! Do not miss out on this offer! CLICK or copy and paste the link into your browser NOW! http://www.etracks.com/r/r0.4?HW6mOq7INVja4AHK2C3Id-S6SWxPABJ95T7a Your calling plan, for which you will be billed monthly by AT&T Wireless Service, includes 400 anytime minutes PLUS 200 BONUS anytime minutes for the first year, for a total of 600 anytime miutes a month-AND 1,000 FREE night and weekend minutes. It's a lot to accept-but we urge you to do so before May 31st. On that day the offer will be withdrawn and your FREE cell phone package reassigned. CLICK or copy and paste the link into your browser NOW! http://www.etracks.com/r/r0.4?HW6mOq7INVja4AHK3bVYQJ8l8LiFGpCUyc7b Stacie Miller Authorization Manager --------------------------------------------------------- * Based on a 1-year agreement; 600 anytime minutes each month and 1,000 Night and Weekend minutes each month Requires activation through AT&T Wireless Services; subject to credit approval. See web site for full Terms and Conditions This offer is brought to you in association with Paradigm Wireless. If you do not wish to receive future promotions, simply REPLY to this email with "REMOVE zope(a)zope.org" in the subject line.

2 1