- Zope - Zope lists

Re: [Zope] Session
by peter bengtson 16 Jan '01

16 Jan '01

Sorry, no experience of using HappySession. Can't even remember why I decided to try FSSession initially. Cheers, Peter > I´m using the Happy Session, but I heardy bad things about this product, > Which one do you think is better ? > > Thanks a lot > Anderson [CC to zope(a)zope.org so that the rest of the list can follow discussion threads like this one]

6 19

Re: [Zope] sendmail implementation problem
by Dieter Maurer 16 Jan '01

16 Jan '01

Lee writes: > ... several recipients from form to sendmail ... I just skipped your question. Not sure, that I got it right. DTML does not have true variables with assignments. However, you can use the REQUEST object as a variable container. If your problem is to collect all recipients from the form and feed them to "sendmail" you could do something like this: <dtml-call "REQUEST.set(recipients,[])"> <dtml-in "REQUEST.form.items()"> ... <dtml-call "recipients.append(_['sequence-item'])"> ... </dtml-in> <dtml-sendmail ...> To: <dtml-var "_.string.join(recipients,', ')> .... </dtml-sendmail> You can even let ZPublisher form the list for you: give all form variables that will contain a recipient the name "recipients:list:ignore_empty" Then, if at least one of these fields got a value, you REQUEST will have a variable "recipients" containing a list with all these fields. I would like to point you to Python's "in" operator. Instead of _['sequence-key'] == 'message') or or (_['sequence-key'] == 'sender') or (_['sequence-key'] == 'senderEmail') or (_['sequence-key'] == 'subject') you can write: _['sequence-key'] in ('message','sender','senderEmail','subject') Easier to write and to read. Dieter

2 1

Re: [Zope] Image Upload
by Fabio da Silva Santos 16 Jan '01

16 Jan '01

Emmanuel Philippot wrote: > > My HTML file uploading an image contains this : > > <input type="file" name="banner"> > > When i submit this HTML page , I call another DTML document containing the following lines > : > > <dtml-if banner> > <dtml-call "banners.manage_upload(file=banner)"> > </dtml-if> > > That's all.... > > but i don't know if the banners object image must already exist under Zope. > > -----Original Message----- > From: fabio(a)ccuec.unicamp.br [mailto:fabio@ccuec.unicamp.br]On Behalf Of > Fabio da Silva Santos > Sent: Tuesday, January 16, 2001 5:44 PM > To: zope(a)zope.org > Subject: [Zope] Image Upload > > Hi there, > > I'm trying to insert an image in Zope by uploading it in an HTML 'file' > field, using the following validation code: > > <dtml-if "banner_1 <> _.None"> > <dtml-call "banners.manage_addImage(id='',file=banner_1)"> > </dtml-if> > > When I submit an empty 'file' field, the dtml-call is invoked just the > same, and I get an error message saying that the field is empty; > when I check what's in REQUEST I see this: > > banner_1 <ZPublisher.HTTPRequest.FileUpload instance at 85fb998> > > Therefore, I reckon there must be something wrong with this > validation routine. What should I do in order to run it properly? > > Thanks, > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

RE: [Zope] Zope and Linux flavors
by sean.upton＠uniontrib.com 16 Jan '01

16 Jan '01

Perhaps another option (for those with a load-balanced server setup), use an intel 7170 (not cheap, but cool) load-balaning appliance, and use the loadbalancer as a router; the 7170 has the abilitiy to set rules for where it sends the load to based upon expression-matching in the URL. This means that you could intercept all "/manage*" URLs with the load balancer and direct them to a box that returns nothing but error pages. I haven't done this (I have a 7140, this model's lower-end sibling), but I have looked extensively at the docs for this, and it might be an option for the cash inclined. Other than that, this doesn't get you out of securing your boxes. I would recomend traditional security strategies (putting servers proxied behind a DMZ), and a box-by-box audit of services using a port scanner. Other than that, I can recommend one of two realistic strategies in dealing with Linux (I dont' claim to be a security expert though) - either: build the distro yourself (i.e. LFS, www.linuxfromscratch.org) and keep tabs on what services are running, as well as monitoring the lwn (www.lwn.net) security page every week, or... Commit to a particular distribution/vendor and get on their security mailing list post-haste. Apply all patches before putting the box out on the net at large. And keep the box patched. Also, monitoring lwn's security page or bugtaq isn't such a bad idea. If you have the time to invest in it, consider a network intrusion-detection system and tripwire to watch the filesystem changes on your boxes. Sean -----Original Message----- From: Simon Coles [mailto:simon@nipltd.com] Sent: Tuesday, January 16, 2001 9:50 AM To: Ragnar Beer Cc: zope(a)zope.org Subject: Re: [Zope] Zope and Linux flavors >Which Linux distributions are you using for running Zope and how >easy it was for you to maximize security of your server? We run a variety of RedHat 6.1, 6.2, and 7.0 and Debian 2.2, as well as Solaris. We apply all the latest updates, turn off services we don't use, and proxy Zope through Apache. We then block all but port 80 at the router. The servers are then firewalled off from the rest of the network. Simon -- --------- My opinions are my own, NIP's opinions are theirs ---------- Simon J. Coles Email: simon(a)nipltd.com New Information Paradigms Work Phone: +44 1344 753703 http://www.nipltd.com/ Work Fax: +44 1344 753742 =============== Life is too precious to take seriously =============== _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Re: [Zope] commit_sub error in Product
by Dieter Maurer 16 Jan '01

16 Jan '01

seb bacon writes: > I'm writing a minimal product for which I'm getting a > > Error Type: AttributeError > Error Value: commit_sub > > from the transaction machinery. The traceback's no help. The > offending code, however is: > > class Foo(SimpleItem) > > def __init__(self, id, title, file): > > self.file = Image('file',title,'') > self.file.manage_upload(file) > > Can anyone tell me what's wrong here? This is a bug, that has been reported several times recently. Your file is probably quite large and Zope wants to store it piecewise in the ZODB (in several subtransaction). However, some necessary object does not have the "commit_sub" method. Look into the collector, whether the bug is already recorded. If not, do it. Dieter

1 0

Re: [Zope] ZWiki --> MS Word
by Dieter Maurer 16 Jan '01

16 Jan '01

peter bengtson writes: > I'm looking for some tool to convert ZWiki text to MS Word. Modern Word versions can resolve URI's and read HTML. Thus, open "http:zopehost/.../ZWiki/page" in Word and save it, (if you like) in word format. > Since ZWiki's are CaPs neurotic, some sections are called for example: > "OrganiSations" or "PaGe". Of cause, the approach above will not change this spelling (at least I hope so; one never knows with MS tools). Tell you boss, it is a feature and that references to related documents are distinguished by the capitalization convention (as it is, really). Dieter

1 0

Re: [Zope] File upload - get only the path - not content
by Dieter Maurer 16 Jan '01

16 Jan '01

Gustav Franzsen writes: > This is a multi-part message in MIME format. > > ------=_NextPart_000_003D_01C07FA3.EAFBA110 > Content-Type: text/plain; > charset="iso-8859-1" > Content-Transfer-Encoding: quoted-printable Please do not send MIME messages into this list! > ... file upload only returns filename ... Are you sure, your form method is "POST" and your "enctype" is "multipart/form-data"? <form action="..." method="POST" enctype="multipart/form-data"> .... </form> Dieter

1 0

Re: [Zope] DTML-<dtml-in> & <dtml-call>
by Dieter Maurer 16 Jan '01

16 Jan '01

Angietel writes: > This is a multi-part message in MIME format. > > ------=_NextPart_000_0011_01C07FB8.87F89860 > Content-Type: text/plain; > charset="iso-8859-1" > Content-Transfer-Encoding: quoted-printable That will be the last time, I answer to your MIME messages. > Is <dtml-call REQUEST['sqlSearchcust3']> equal to <dtml-in = > sqlSearchcust3> <dtml-call REQUEST['sqlSearchcust3']> will raise an exception, as it will look for an object with name "REQUEST['sqlSearchcust3']". What you want is: <dtml-call expr="REQUEST['sqlSearchcust3']"> This does nothing (maybe raises a KeyError 'sqlSearchcust3'), as "dtml-call" evaluates for side effects only and does not produce any text. "REQUEST['sqlSearchcust3']" does not have side effects. Now, "<dtml-in sqlSearchcust3>...</dtml-in>" may also do nothing. Though, this is usually not expected. I suggest, you read carefully the DTML chapter in the upcoming Zope book and try to understand the semantics of the various DTML tags. Dieter

1 0

<dtml-var expr="maand" missing=1>???
by Edwin Martin 16 Jan '01

16 Jan '01

Hello, How can I use an undefined variable in an expression? I made a DTML document which gets parameters from the URL, like "/nieuw?maand=1". But I also want it to work when no parameters are given. 'Missing' should be the answer, but the following doesn't work: <dtml-var expr="_.int(maand)+1" missing=1> <dtml-let defmaand=maand missing=1>...</dtml-let> <dtml-in listbydate reverse size=20 start=maand missing=1> I expected to find a solution in http://www.zope.org/Members/michel/ZB/DTML.html http://www.zope.org/Members/michel/ZB/AppendixA.html but couldn't find it. Edwin (who would be so happy with *good* documentation) --- To be upset over what you don't have is to waste what you do have. -- Unknown Surf Edwin Martin's brainwaves: http://www.bitstorm.org/edwin/

2 1

Re: [Zope] ZClasses meet PythonScripts, sample request
by Dieter Maurer 16 Jan '01

16 Jan '01

Timothy Wilson writes: > When is it proper to make your methods part of the ZClass itself and when > should I put them out in a folder somewhere to be acquired? When they are (and will be) only used by your ZInstances, put them there. When they are of more general interest, put them somewhere, where can are found by all interested parties. Dieter

1 0