- Zope - Zope lists

Re: Traversal of ZODB
by Steve Alexander 05 Jul '00

05 Jul '00

On Fri, 30 Jun 2000, David Trudgett wrote: > I wonder if anyone has a sample Python script that traverses the ZODB to > query or perform arbitrary operations on the objects found in it? My > present requirement is to write a script that goes through and does some > automated updating of several dozen DTML documents. Hi David, I just posted something similar to Zope-Dev: http://lists.zope.org/pipermail/zope-dev/2000-July/005744.html -- Steve Alexander Software Engineer Cat-Box limited http://www.cat-box.net

2 3

LocalFS Product - where is it?
by Joe Hewitt 05 Jul '00

05 Jul '00

I was looking at the zope site to this mysterious Product that will let me use my current pages in a zope server, but it seems to have been taken away. Will it come back or reappear in an update? Thanks. -- Joe Hewitt email: joe(a)apollo.wuacc.edu Linux Coordinator Washburn University Law School

1 0

Re: [Zope] How do I call a parameter from inside of the same form?
by Dieter Maurer 05 Jul '00

05 Jul '00

Sean G Richards writes: > Hello, > I am trying to build an SQL statement in a form, and then pass the > statement onto a Z SQL method, for execution. > something like > > < form action="search_results" method="get"> > > <input type="text" name="select_statement" value="SELECT name, > phone_number, address FROM black_book WHERE" size=20> > > <select name="where_statement" size=3> > <option value=" name = 'jennifer' ">Jennifer > <option value=" name='anne' " > Anne > <option value=" name='alice' ">Alice > </select> > > <input type="hidden" name="cat_both_previous_statements" > value="<dtml-sqlvar select_statement type=string> <dtml-sqlvar > where_statement type=string>"> > > <input type="SUBMIT" name="SUBMIT" value="SUBMIT"> > </form> > > I understand that this isn't the correct way to do this, .... Note: you let the form fill in the browser but you build the SQL in the server, more precisely the "search_result" object. The form should only contain fields that need be changed by the user (and texts to help the user to fill the fields). Thus, usually, your form would not have a field with a "select statement", unless the user should be able to change this, e.g. into an "insert" statement or something (DANGER!). As an simple xample, you may have: <form action=search> Name to Search for: <select name=name size=3> <option value="jennifer">Jennifer .... </select><br> <input type=submit> </form> On the server side, you would usually use a Z SQL Method to do the actual search. See the Z SQL Method guide at Zope.org/Documentation for examples. Your method would probably have a parameter "name" (the same you used for your form field!). The "search" DTML method could then be: <dtml-var standard_html_header> <dtml-in ZSQLMethod> <dtml-var name> <dtml-var phone_number> <dtml-var address><br> </dtml-in> <dtml-var standard_html_footer> Look at other examples in the Z SQL Method guide. Dieter

1 0

Re: [Zope] How to undo the last transaction from a DTML Method ?
by Dieter Maurer 05 Jul '00

05 Jul '00

Frederic Quin writes: > I would like to know how to undo the last transaction from a DTML Method and I > have no idea of how I can do that. Help ! Go to the folder containing the DTML Method. Press the "undo" tab. You should get a list of recent transactions. Check the one, you would like to be undone and press "undo". Dieter

1 0

Re: [Zope] oracle8 and cursors
by Dieter Maurer 05 Jul '00

05 Jul '00

Andy Pahne writes: > i've been using oracle8 with zope succesfully for a while. now my database > programmer came up with a solution for a certain problem, which "we cannot > solve with an easy select statement". he told me, that we are gonna have to > use db-cursors instead. > my question is fairly simple: is there any difference in handling cursors > with zsql-methods in comparison to handling 'simple' select-statements? can > i use <dtml-in "..."</dtml-in> to iterate over the result sets? ZOracleDA uses a cursor internally to execute SQL statements. If you want to create cursors dynamically, you will probably need to subclass ZOracleDA.db.Connection. Dieter

1 0

Re: [Zope] [newbie] cgi-tasks howto? stupid question
by Dieter Maurer 05 Jul '00

05 Jul '00

Rajil Saraswat writes: > if i donot run the httpd but run only the Zserver then http://localhost > will work? "http://localhost" would contact port "80". At least under Unix all ports up to 1024 are priviledged. Only servers running as root can bind to them. For security reasons, you probably would not like to run Zope as root. Today, I read in the list, that even if you start Zope as root, the actual ZServer uses a different user (to be configured). Then this would remove the above mentioned security issues. If this is indeed true, you may try to use Zope with port 80. There is an option to "z2.py" which allows you to specify which port to use for the HTTP server. Dieter

1 0

Zope and Security
by Tom Scheidt 05 Jul '00

05 Jul '00

Im interested in setting up a Zope site for an accountant. I'd like to have his clients be able to review and submit information online, but Im concerned about security issues, such as entering social security #s etc. I have Zope running with Apache v1.3.x Does anyone know of any links covering possible solutions? Have any ideas? Tom Scheidt | www.falsemirror.com | tom(a)falsemirror.com ---------------------------------------------------------------------------- -----------

2 1

Re: [Zope] [newbie] cgi-tasks howto? stupid question
by Dieter Maurer 05 Jul '00

05 Jul '00

Rajil Saraswat writes: > i tried out this but this isnt working out for me. can you point out the > error. > > my index_html file is > <dtml-var standard_html_header> > <FORM method=post action=http://localhost:8080/3inet/print> > Enter name: <INPUT type=text name=valname><BR> > > <INPUT type=submit> > </FORM> > <dtml-var standard_html_footer> > > > the print file is > <dtml-var standard_html_header> > <h2> > <dtml-var valname> > </h2> > <dtml-var standard_html_footer> Try <dtml-var REQUEST> in you "print file". You get a beautifully formated view of the complete HTTP Request send by the browser. Often this helps to analyse such problems. Dieter

1 0

Re: [Zope] problem with ZopeFind and objectValues
by Dieter Maurer 05 Jul '00

05 Jul '00

Jerome Alet writes: > > <dtml-in "ZopeFind(this(), obj_metatypes=['Folder'])"> > > <dtml-var id> - <dtml-var title> > > </dtml-in> > > > > gives me the following error: > > > > """Unauthorized > > > > You are not authorized to access id.""" > > > > If I set a proxy role of manager to this dtml-method that doesn't change > > anything, it still doesn't work. > > In fact if I give this method a proxy role of Manager then it works fine > if I access directly to this method from my browser. However if I call > this method from inside another dtml method then it seems that the method > loose its proxy role of manager. Today, I read the "ZopeSecurity" artikel by Jim Fulton (--> zope.org) It tells that this behaviour is changed for Zope 2.2. Dieter

1 0

Looking for Zope webmaster or web developer job
by Loren Stafford 05 Jul '00

05 Jul '00

I'm looking for a new job where I can continue to use Zope for website management and applications development. Contract or full-time. Silicon Valley California or telecommute. If you know of any openings, please let me know. -- Thanks -- Loren Stafford lstaffor(a)dynalogic.com http://www.dynalogic.com/resume.html

1 0