- Zope - Zope lists

Zope and security
by Arnaud Lecat 23 Aug '99

23 Aug '99

Hi I'd like to talk about security and Zope. How secure is Zope ? If you have two interface on one server can you configure Zope to display manage screens and public Web pages on two different nic interface. Any known security bugs or exploits ? My sysadmin is paranoid about security... (he's the same who doesn't want to hear about Linux :) ) -- >> WinErr: 080 Clavier introuvable - Veuillez appuyer sur n'importe quelle touche pour continuer. << Arnaud LECAT >> Email: lecat(a)hexanet.fr >> WWW page:www.hexanet.fr/~lecat HEXANET >> http://www.hexanet.fr Z.A. Farman sud - 9 rue Roland Coffignot BP 415 - 51689 Reims Cedex 2 - France phone: (33) 03 26 79 30 05 Fax: (33) 03 26 79 30 06

3 2

ANN: Redirector 1.0
by Alexander Staubo 23 Aug '99

23 Aug '99

Redirector is an experimental folder product for redirecting object requests. Any request to a subobject (whether it exists or not) in the folder is redirected to a designated target URL. A flexible mechanism for mapping specific URLs is also provided. For example, you might have an URL such as http://oldserver/foo (running Zope, of course) which you've moved to your brand new server http://newserver/bar (Zope not required). Once you have deleted or moved the foo folder or object out of the way, create a Redirector object called foo on the new server, set its Target property to http://newserver/bar, following which requests for http://oldserver/foo will then be redirected to http://newserver/bar. Given this, if a user then requests http://oldserver/foo/fnargh, the request will simply be redirected to http://newserver/bar/fnargh. The Redirector object also supports mapping rules: For example, if the old server had a subobject called "milk", which now exists on the new server under the name of "honey", then you can create a mapping which simply maps the old object to the new object. Mappings support (or rather, require) regular expressions to be used, so you could also map any object starting with the letter M to a specific object, for example. (Support for regular expression groups are planned.) Added bonus feature: If you set the Redirector to "hard mapping" mode, it will fall back to the default target URL if none of the mappings match the requested URL. That means -- if you're like me, converting a dull old Netscape server to a new Zope site with lots of magic fairy dust added -- that you can create mappings for all the old documents that should be redirected to their Zopefied counterpart URLs, but for all the documents that are deprecated on the new server, the redirection will be set to the server's root folder. Thie product is experimental only in the sense that it has not been extensively tested. Please report bugs, problems, or inconsistencies to me. http://www.mop.no/~alex/download/redirector-1.0.tgz -- Alexander Staubo http://www.mop.no/~alex/ "QED?" said Russell. "It's Latin," said Morgan. "It means, 'So there you bastard'." --Robert Rankin, _Nostramadus Ate My Hamster_

1 0

RE: [Zope] Starting Zope from Telnet
by Alexander Staubo 23 Aug '99

23 Aug '99

If your question is "how to execute ZServer on Linux without having its process being killed when I close the terminal session", the answer is something like: nohup ./start & (For more information, do "man nohup") -- Alexander Staubo http://www.mop.no/~alex/ "QED?" said Russell. "It's Latin," said Morgan. "It means, 'So there you bastard'." --Robert Rankin, _Nostramadus Ate My Hamster_ > -----Original Message----- > From: Francisco Sam Castillo [mailto:fsam@proyecto-web.com.mx] > Sent: 20. august 1999 22:36 > To: zope(a)zope.org > Subject: [Zope] Starting Zope from Telnet > > > Hello all, > > One question, how can I start the zope from a telent session > and logout > without Zope shutting down? > Please help me I have struggle a lot to finally fin a place > to make it work > and now that it does I can not make the process stay when > closein my remote > session... > > :( > > Sam > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (To receive general Zope announcements, see: > http://www.zope.org/mailman/listinfo/zope-announce > > For developer-specific issues, zope-dev(a)zope.org - > http://www.zope.org/mailman/listinfo/zope-dev ) >

2 1

previous-sequence attribute does not work
by Stephan Richter 23 Aug '99

23 Aug '99

hi, I have the following problem on my Zope Portal site: I wrote the following code: <dtml-with zdpNews> <ul> <dtml-in "objectValues('News Item')" sort=date reverse start=qs size=5 orphan=2> <li><a href="zdpNews/<dtml-var id>"><dtml-var "date" fmt="%m/%d/%Y"></a> - <dtml-var "title"></li> <dtml-if sequence-end> </ul> <dtml-if previous-sequence> <a href="<dtml-var document_id><dtml-var sequence-query>qs=<dtml-var previous-sequence-start-number>"><--Newer</a> </dtml-if> <dtml-if next-sequence> <a href="<dtml-var document_id><dtml-var sequence-query>qs=<dtml-var next-sequence-start-number>">Older--></a> </dtml-if> </dtml-if> </dtml-in> </dtml-with> It will create the first site, and when I click on "Older-->" it will go to the next news group., but it will not display the "<--Newer" link. Basically it does not pass the previous-sequence if-test. What is worng? Is it a bug? You can see the problem at: http://www.zope.org:18200/Members/srichter Another weired thing. If I change the size to 4 and the orphan to 1, the "Older-->" link will be broken. It says that slice needs to be an integer. Does anyone has a clue what this could mean? regards, stephan -- Stephan Richter iXL - Software Designer and Engineer

1 0

calling product ZClass add method
by Chris Walter 23 Aug '99

23 Aug '99

Hi Everyone, Can anyone tell me how I can create a ZClass instance via DTML from outside of the product directory? Using the add new item button at the bottom of the page in a folder works fine but I also want to create some instances dynamically in DTML. I can't figure out how to call: manage_addProduct/photoCD/multiRes_add using the <dtml-call X> sequence. multiRes is a ZClass in the photoCD product directory. -Chris walter(a)budoe.bu.edu

1 0

Re: [Zope] Python books (was RE: Greetings)
by Itai Tavor 23 Aug '99

23 Aug '99

Can't tell you exactly where to get it... but try searching for it on www.bookbrowse.com. You can then check with any of the stores returned for availability. > > Philip Suh wrote: > >>I am trying to learn Python and would like any input on books and > >>tutorials to aid in learning. > > > > The best Python book today is "Internet Programming With Python", both for > > beginners and advanced users. It starts with an excellent overview and > > proceeds to cover the hows and whys of the language very authoritatively. > > The authors are some of the foremost Python gurus, including Aaron Watters > > and Guido van Rossum, creator of Python. > >Amazon.com says that Internet Programming With Python is out of Print. > >Any ideas on where else to get it? > >THanks > >Zope/Python newbie, >Phil -- Itai Tavor -- "Je sautille, donc je suis." -- itavor(a)vic.bigpond.net.au -- - Kermit the Frog -- -- "What he needs now is understanding... and a confederate victory" -- -- Dr. Jacobi, Twin Peaks --

1 0

closing navigation trees
by Tim Wilson 23 Aug '99

23 Aug '99

Hi everyone, I've implemented a navigation tree that's working quite well now. (Thanks to the good advice of several of you.) The page displays an introductory screen when the page with the tree loads. I'd like to have that page loaded again whenever the user closes all of the branches. Is that possible? -Tim -- Timothy Wilson | "The faster you | Check out: Henry Sibley H.S. | go, the shorter | http://slashdot.org/ W. St. Paul, MN, USA | you are." | http://linux.com/ wilson(a)chem.umn.edu | -Einstein | http://www.mn-linux.org/

1 0

Squisdot problem
by Roché Compaan 22 Aug '99

22 Aug '99

I modified TinyTables.py like this: from Persistence import PersistentMapping from Persistence import Persistent When i try to add Squishdot site with slashdot-like or blue-heaven theme, i get the following error: Zope has encountered an error while publishing this resource. Error Type: AttributeError Error Value: regs The traceback reads:  Roché

2 1

NewBeZenner Question - recursive methods continued
by Roché Compaan 22 Aug '99

22 Aug '99

I have a recursive method that renders the site navigation, called from standard_html_header:   <tr><td>  <a href=""></a>  </a>  </td></tr>    In the standard_html_header I declare a new variable:  I then compare  to determine what Folder Image should be rendered and if a hyperlink should be created. I tried to simply display the pageid variable to determine it's value:  , but it produced an error This does not work. What todo? Roché

2 1

HTML formatting overlooked
by Tim Wilson 22 Aug '99

22 Aug '99

Hey everyone, I'm trying to take advantage of the Random Content HOWTO (http://www.zope.org:18200/Documentation/How-To/RandomContent) to generate random quotes from famous scientists. I followed the directions carefully, but apparently I screwed up somewhere. Here's what I did. 1. I created a new folder just under / called 'quotes' 2. I filled /quotes with three DTML Methods--each one contained one quote. Here's an example: The most incomprehensible thing about the universe is that it is comprehensible.     Albert Einstein That's the entire contents of the object. 3. In my index_html object (in a sub-folder), I put the following dtml (according to the directions): <td width="20%" rowspan=2><dtml-var expr="_.whrandom.choice(quotes.objectValues())"></td> Unfortunately, Zope renders the contents of the quote literally, replacing, for example, all the < with <. The result can be seen at http://206.131.108.122:8080/atlas/. Why does this happen? -Tim -- Timothy Wilson | "The faster you | Check out: Henry Sibley H.S. | go, the shorter | http://slashdot.org/ W. St. Paul, MN, USA | you are." | http://linux.com/ wilson(a)chem.umn.edu | -Einstein | http://www.mn-linux.org/

2 3