- Zope - Zope lists

SSL over Multiple Zope/Plone sites?
by michael nt milne 29 Mar '06

29 Mar '06

Hi I've got a few Plone sites set-up using Apache through Zope. The question is, I'd like to implement SSL on the site login etc, as it's not secure without this. There's also one site I'd like to serve completely over https. However. I'm told that you can't run SSL on virtual hosts and can only have once SSL site per IP address. What would be the way round this? I know I could set-up SSL on Zope only using the following documentation: http://www.zope.org/Members/Ioan/ZopeSSL but if I can't carry this through to Apache then I'd have to run Zope as the web server as well as the application server. Thanks Michael

9 28

Virtual Hosting is confusing
by Vishal Kashyap 28 Mar '06

28 Mar '06

Hi , Zope virtual hosting in Zope is confusing to me. Would anyone make me understand that with a apache equivalent. I have a website as http://myserver.com:8080/myprod I want to host it as http://myprod.com:80 I would give a DNS entry for http://myprod.com:80. I want to call the website from browser as http://myprod.com Would anyone please help me with this. Thanks in advance -- With Best Regards, Vishal Kashyap. http://www.vishal.net.in

3 3

Tutorial
by Vishal Kashyap 28 Mar '06

28 Mar '06

Hi , Can anyone me point to a tutorial which relates to apache+php . Thanks in advance -- With Best Regards, Vishal Kashyap. http://www.vishal.net.in

3 4

kupu drawers
by Garito 28 Mar '06

28 Mar '06

Hi! I try to create a image library for the image drawer but when I click on the drawer button an error is raise: this.shared.xmldata.setProperty is not a function I supouse that the error is raised because the xml is incorrect but I can't see where Can you help me? This is the XML: <?xml version="1.0" ?> <libraries> <library id="Galeria"> <uri>http://yanged:9180/EspaciosYanged/Huete/huete.cc/Carpeta Imagenes/Ver/Galeria</uri> <title>Galeria de fotos</title> <src>http://yanged:9180/EspaciosYanged/Huete/huete.cc/Carpeta Imagenes/Ver/Galeria</src> <icon>http://yanged:9180/EspaciosYanged/Huete/huete.cc/Imagenes/CarpetaImagenes.p…</icon> </library><library id="Imagenes"> <uri>http://yanged:9180/EspaciosYanged/Huete/huete.cc/Carpeta Imagenes/Ver/Imagenes</uri> <title>Imagenes de la web</title> <src>http://yanged:9180/EspaciosYanged/Huete/huete.cc/Carpeta Imagenes/Ver/Imagenes</src> <icon>http://yanged:9180/EspaciosYanged/Huete/huete.cc/Imagenes/CarpetaImagenes.p…</icon> </library> </libraries> Thanks a lot! -- Mis Cosas http://blogs.sistes.net/Garito/

2 2

ZStylesheet, Whoops, hold that problem!
by John Huttley 28 Mar '06

28 Mar '06

I've just realised it was a bit of TAL that ZSS had put in there. sorry about that--

1 0

Keyerror removing ZStylesheet
by John Huttley 28 Mar '06

28 Mar '06

I've shot my self in the foot removing ZStylesheet from my app. When ever I try and view it, i get a key error. I've tried reloading ZStylesheet and various imports and exports but its sticking with me. Is there any easy way of fixing this sort of thing? --john

1 0

How to do this trick..
by Jason C. Leach 28 Mar '06

28 Mar '06

Hi, I'm wondering how I can do this little trick (sp_info is a globaly devide var, it's a dictionary obj): <option tal:repeat="group groups/existing/high" tal:content="group" tal:attributes="onmouseover string:doTooltip(event, '${sp_info/${group}/common_name}')" onmouseout="hideTip()"> </option> So based on my the value of 'group' from my repeat, I want to use the value to look up another value in a different dictionary. It works if I do this: (event, '${sp_info/whatever/common_name}') but does not like me using the embedded ${group}. Thanks, Jason. -- ........................................ .... Jason C. Leach .... PGP Key: 0x62DDDF75 .... Keyserver: gpg.mit.edu

6 5

OWASP Top Ten Most Critical Web Application Security Vulnerabilities
by Stacy.Ladnier＠noaa.gov 28 Mar '06

28 Mar '06

The Web Development Group at our office is currently trying to compose a white paper addressing the steps Zope, Plone and Python take to ensure secure web applications, as well as additional steps developers should take to keep it that way. Current documentation existing on the web does not seem to specifically address the concerns many of our customers express. We often find ourselves spending more time defending the technology and its security than we spend on development itself. We decided it is time to write a paper to put all concerns and questions to rest. The goal we are aiming for is to dig deeper than the current documentation and work on explaining the intricate details of what makes each of these technologies secure from attacks and security weaknesses. As a starting point, we are looking at the top ten critical web application security vulnerabilities put out by The Open Web Application Security Project (http://www.owasp.org/documentation/topten.html) We are far from being the experts on this subject matter, even though we try to get a bit closer every day. Any help from the mastermind developers themselves would be greatly appreciated and only add to the validity of the white paper. Once the paper is complete, we are willing to publish it for the communities to use for their own purposes. Please provide any input or suggestions you have. The more people help, the better the resulting paper will become. Stacy Ladnier Software Engineer/Web Developer Anteon Corporation

1 0

change objects id
by George 27 Mar '06

27 Mar '06

How can I change an objects id from a python script? Sorry if it's sth obvious, can't figute it out...

3 3

Re: [Zope] Zope Debugger lets WingDbg fail to connect toclient
by Chris Withers 27 Mar '06

27 Mar '06

sdeibel wrote: > I don't think the linecache hack is going to work for Wing because the > file is read by the IDE and not within the same process space as Zope is > running. While we might eventually make it possible to transfer code > over the debug connection for cases like this, it would slow our > debugger to a crawl in many debug scenarios so it's not designed that > way now. Sorry to hear that, maybe you could recommend zdb to people in the meantime ;-) > The particular approach to patching _compiler may be useful, tho, in a > general sense to make our patch at least a bit simpler. Simpler is good... > I see there seems to be some evolution in Zope that fits with > perhaps some day compiling the right file name into code objects, Not at all clear what you mean, perhaps you could clarify? cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

2 2