- Zope - Zope lists

RedHat Secure Web Server 3.1 & Zope 2.1 & MySQL
by CURTIS David 06 Dec '99

06 Dec '99

Hi, My Web site got hacked. I was told that RedHat Secure Web Server 3.1 can prevent certain types of attacks. Does Zope run on Secure Web Server 3.1? I was running Apache and Zope (ZAP) together before. Not knowing exactly the method of my server's breach makes it hard to prevent further attacks but what is best way to prevent such problems again?

1 0

RE: [Zope] Urgent - server down.
by Michel Pelletier 06 Dec '99

06 Dec '99

> -----Original Message----- > From: chas [mailto:panda@skinnyhippo.com] > Sent: Monday, December 06, 1999 10:33 AM > To: zope(a)zope.org > Subject: [Zope] Urgent - server down. > > > Well, it's been a nightmare day for Zope on our box. > Does it self destruct when Data.fs reachs a certain > size or something ? There are no built-in limits on Data.fs size. Your OS may have one however. How big is the file? > It's been running fine for the past 2 months. > Then today we've been getting these error messages > almost non-stop : > > "Temporarily Unavailable > The resource you requested is temporarily unavailable - > please try again > later. > (116) unable to connect, fd=3 " PCGI cannot connect to Zope. Can you connect to ZServer? > Alternatively, the server just hangs and doesn't respond > (but ps -aux shows the process is running). Is it spinning? (consuming 100% CPU resources?) or hung? (consuming none..) -Michel

1 0

Re: [Zope] RedHat Secure Web Server 3.1 & Zope 2.1 & MySQL
by Teodor Cimpoesu 06 Dec '99

06 Dec '99

CURTIS David wrote: > > Hi, > > My Web site got hacked. I was told that RedHat Secure Web Server 3.1 can prevent certain types of attacks. Does Zope run on Secure Web Server 3.1? I was running Apache and Zope (ZAP) together before. Not knowing exactly the method of my server's breach makes it hard to prevent further attacks but what is best way to prevent such problems again? Quick: Go to freashmeat.net, search for ``saint'' install it, run full test, read carefully the results, take quick measures. Long: How do you know it was hack? Do you have any traces? Most af the hacks I've heard implied exploits of wrong written perl scripts *grin* Check all your scripts that uses high privileges or do weird things. Err, one more Q, it wasn't hack though Zope, was it? -- CIMPOESU Teodor, Web Programmer @ DIGICOM S.A. Bucharest, Romania @ Internet, site development @ teo(a)digiro.net , +(401)-330.47.28 official home page ~ http://www.digiro.net/ Internet web page ~ http://internet.digiro.net/

1 0

RE: [Zope] WebDav wishful thinking WEBCR ideas.questions
by Brian Lloyd 06 Dec '99

06 Dec '99

> I confess I don't understand this WebDav stuff yet. But > reading about it > has got me dreaming again on a favorite theme: choreography and > temporal-spatial indexing of networked information > > <snip> > > Is it possible for make a drg'n'drop page in Zope which would > allow for > fast and efficient building of web pages> For example where > there are many > links and lists. The immediate pragmatic application is the > endless need to > compile pages of web-related research with href links and build this > quickly among a group of people over the web. > > <snip> > > What I want to do is drag'n'drop from the already open pages > onto a Zope > page and then the following actions will automatically occur: > > 1. Title and href link will be added > 2. any selected text on the page will be copied as well under > href link > 3. An email will be sent alerting users 'subscribed' to this > page of new > links and/or update notice Jason, WebDAV really doesn't have anything to do with those sort of things - it is really a "content management protocol" in that it lets you treat certain Zope objects as if they were files on a remote filesystem from a WebDAV-enabled client. It doesn't really have anything to do with the sort of visual page building ideas you are asking about. You can find out more about what DAV is and is not from www.webdav.org. Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

RE: [Zope] dtml-if
by Chris McDonough 06 Dec '99

06 Dec '99

> I can't figure out how to write this simple expression. I am trying to > compare 2 variable in a dtml-if statement. > > ---variables: > username: <dtml-var username><br> > AUTHENTICATED_USER: <dtml-var AUTHENTICATED_USER><br> > > ---output: > username: dan > AUTHENTICATED_USER: dan > > ---expression: > <dtml-if "username == AUTHENTICATED_USER"> > > > ---evaluates false and I can't figure out why! Have also tried > <dtml-if "username == REQUEST['AUTHENTICATED_USER']"> > to no avail. In the if expression you're using (username==ATHENTICATED_USER), you're comparing an object to a string. AUTHENTICATED_USER is a Zope object, not a string. You want: <dtml-if "username==AUTHENTICATED_USER.getUserName()">

3 2

WAP anyone ?
by Jason Cunliffe 06 Dec '99

06 Dec '99

Hello Does anyone know of Python or Zope work on/with/for WAP - Wireless Application Protocol ? ..Some WAP links, in case you don't know what I am acronyming about: Ericsson http://www.ericsson.se/WAP/ Nokia http://www.nokia.com/corporate/wap/gateway.html The WAP Forum http://www.wapforum.org/ Thanks - Jason ------------------------------------------------- Jason Cunliffe <jasonic(a)nomadicsltd.com> NOMADICS.STUDIO(Design Director) Geo-Digital Arts and Technology Le Vieux Moulin, Route de Mons 83440 SEILLANS, FRANCE Tel: +33 (0)4 94.76.98.72 Fax: +33 (0)4 94.76.97.77

2 1

Displaying the text content of a ZClass
by Alexandre Ratti 06 Dec '99

06 Dec '99

Hello, I've created a ZClass that subclasses CatalogAware, DTMLDocument and DTMLMethod. This Zclass has several properties. It also has a text content. This content is entered in a textarea field in a form and saved with <dtml-call "manage_edit(REQUEST.data, REQUEST.title)"> just as in a DTML method. This works fine. The ZClass content is displayed with a method called index_html (nothing fancy). This method displays property values and the text content. Eg. <dtml-var standard_html_header> ... standard HTML stuff for ZClass instances ... <dtml-var myProp1> - <dtml-var myProp2> <HR> <dtml-var raw> </dtml-var standard_html_footer> Problem: this works OK as long as the ZClass text doesn't content nested DTML. <dtml-var raw> tag just inserts the text content as is. It is unrendered (I suppose that's why it's called "raw"). <dtml-var title> is sent as is to the browser. => How can I display the rendered text content for a ZClass? It sounds simple but I'm stuck. => I'll rephrase the question: imagine you want to wrap DTML Methods in a ZClass to make them CatalogAware and add custom properties. How do you display the content of the ZClass instances ? Thanks. Alexandre

1 0

RSS/RDF
by Alwyn Schoeman 06 Dec '99

06 Dec '99

Could someone please explain to me what it is and how it works, or point me to some URL's? Thank you -- ~~~~~~~~~~~~~~ Alwyn Schoeman Systems Engineer Prism Secure Solutions

1 0

old website
by Tom Deprez 06 Dec '99

06 Dec '99

Some people asked me to re-show my old web-site around Zope and postgressql. Ok, here it is again. But, be aware! The website is rather old and... at that time we're using Zope 1.10.x http://gallery.uunet.be/tom.deprez/Master/ Regards, Tom.

1 0

Fwd: Re: [Zope] manage_editProperties in ZClasses
by - 06 Dec '99

06 Dec '99

On Sun, 05 Dec 1999, you wrote: > On Sat, Dec 04, 1999 at 12:26:21PM +0800, - wrote: > > hi all, > > how do i change the default value of textarea (cols) from 35 to something else? > > i edited Property.py in lib/python/ZClasses, changing line 199 > > -- <textarea name="%s:text" rows="6" cols="75"><dtml-var %s > > ></textarea>''' > > saved it, restart zope and tried changing my ZClass property. biut i still got > > the cols=35. what did i miss? > > Completely shutdown Zope, make your change, delete the associated .pyc > file (I'd guess that it is lib/Python/ZClasses/Property.pyc) so that > Python is forced to actually look at your .py file (should be doing this > anyway b/c of timestamps, but make sure) and restart Zope. > did as you say, shutdown zope, removed Property.pyc, edit Property.py, start zope. went to manage_main, still textarea remains with default cols (35). checked Property.pyc, it does have my cols value (80). perhaps DC could give users the ability to change the textarea size, like they did on other management interfaces. anyways, i've decided to construct my own form for adding/editing properties. the only hitch i got is when editing properties, i can't reuse the old id. i need to create a new id and delete the old id. or did i not see the obvious solution? thanks for all help Am I Evil? ------------------------------------------------------- Am I Evil?

1 0