- Zope - Zope lists

Re: [Zope-dev] Re: Zope on Windows - REQUEST for volunteers
by Chris Withers 21 Mar '05

21 Mar '05

Mark Hammond wrote: > A quick search for "windows" doesn't show too many. As far as I can tell, > all but 2 (1689 and 1728) are fixed with my patches. I also note that my > patches have been sitting there for a number of months now - so I humbly > suggest the problem is not simply a lack of appropriate fixes :) Yes, but it is a shortage of people knowledgeable enough to merge them ;-) > In my experience, that is not true. Zope on Windows is generally as stable > as Zope on any platform. I'll second that. > * All Zope versions are clearly "broken" (as above) in fundamental (but > generally the same) ways on Windows, but the status of my patches as > "features" vs "bugfixes" is unclear - especially given my lack of > understanding of the culture or the Zope world beyond Plone. They're bugfixes, I don't think anyone would complain if you fixed 2.7 AND 2.8 ;-) > I understand I could probably gain committer privileges but as mentioned, I > wouldn't quite know what to do with them if I did <wink> Well, you could merge your patches. I suspect you're the only person knowledgeable and confident enough to do so. Many people would thank you for it though :-) cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

1 0

RE: [Zope] Re: Zope SQL injection
by Andy Yates 21 Mar '05

21 Mar '05

> > Andy Yates wrote: > > Could somebody either point me to an article or explain what precautions > > should be taken to prevent SQL injection in Zope. If user entered form > > data is passed to a ZSQL method does something automajically db escape > > the data or is the programmer responsible for doing this. If the > > programmer is responsible, how is it done in Zope? Thanks! > > Don't use <dtml-var> in ZSQL-Methods, use only <dtml-sqlvar>. > <dtml-sqlvar> is escaping the parameter automagically, so nobody can > inject malicious code... at least I hope so...;) > > Cheers, Maik > Right, I use <dtml-sqlvar>. Now that I read the manual ;-) I clearly see that is what the dtml-sqlvar prevents. Thanks! There has been a lot of buzz about sql injection lately for some reason and I just wanted to make double sure I understand the basics.

2 1

Best place for libraries
by Gabriel Genellina 21 Mar '05

21 Mar '05

Hello I'm migrating from Zope 2.6 to 2.7 with an INSTANCE_HOME. In the previous setup, we had: Zope lib python <some shared libraries> Products <standard products plus some from external sources plus some developed in-house> java <other Java packages comunicating via xml-rpc> Now we have a SOFTWARE_HOME and an INSTANCE_HOME and I'm not sure where is the best place for each directory. Our own products (which are specific for the application) surely go under INSTANCE_HOME. But CookieCrumbler, by example, as an external product, should be under Products in SOFTWARE_HOME or INSTANCE_HOME? What about some shared libraries not related explicitely to Zope (like HyperText, an OO HTML generator)? Should be on SOFTWARE_HOME\lib\python? or maybe outside the Zope dir, in lib\site-packages inside the Python install? I know there are many ways to do this, I'm looking for some "best practices" or something like that. Gabriel Genellina Softlab SRL

4 3

Create zope documentation mailing list
by KLEIN Stéphane 21 Mar '05

21 Mar '05

Hi, I think than a zope documentation mailing list can be a good thing to coordinate work on zope documentation. I would like work on it, but I don't know who maintain it, what is the road map,... If this here isn't good place to speak about this, please say it me. regards, Stéphane

5 5

image border in Zope 2.7.x
by Chris 21 Mar '05

21 Mar '05

Hi, this is a rather trivial problem: I updated a Server from 2.6.2 to 2.7.4 I noticed that all images used within link tags are shown with a border if <a href="#"><dtml-var my_image></a> is used (yes, I know: use PT ... it's not my code) unless I set a style (border-width:0). 2.6.x did not show this border. Is there a simple way to change Zope's way to render image-objects globally? I dont' want to change the dtml-code of other people's if possible. Regards Chris

2 3

Mac OS X 10.3.8 Webdav + Zope 2.7 + Powerbook Hangs
by Pavel Zaitsev 21 Mar '05

21 Mar '05

Hi, I am having issues editing files over webdav on my powerbook. Zope is mounted via webdav and I am using vim with nowritebackup configured. Since such configuration is similar to what many may use on this list I thought some of you may shed some light on what is happening. Here is steps i go through: 1. book powerbook (postgresql 8.0 starts at that time as well) 2. i login, start console, sudo su to root, do zopectl start 3. mount webdav with Ctrl-K on finder 4. Open shell, change over to /Volumes/127.0.0.1/web_space 5. edit files saving them once in a while, using vim. Now problem is sometimes I save and the console/vim/webdav mount locks down. Meaning that if I access /Volumes/127.0.0.1 from other console, it will lock up too. After little while applications related to file system(all of them?) start to lock up, like Finder, on CMD-N does not open new window, but puts a beachball cursor up. Itunes keeps playing fine until it needs to change song file. It is really really annoying I might suspect zope/webdav issuing dns lookup in some critical section that does not return, or some such thing, since lockouts last around 2-3, maybe 5 mins. Once time passes all requested actions complete, ie New window for finder opens. Curious thing, though that vim says that file has been changed since my last save and if i want to replace whatever is on webdav mount. Vim checks for change date/times, I suppose. Any insights of Mac/Zope users would be appreciated. Pavel

2 1

Accessing to ZOPE_HOME
by leticia larrosa 21 Mar '05

21 Mar '05

Hi all: How can access to the value of the "ZOPE_HOME" that Control_Panel shows in the Zope Management Interface?. My target is read in execution time a content of one external method, but my zope server can run over windows or linux, and i must refer the folder when the zope are installed, indeed when the external methods are located, for example: "/usr/lib/zope2.7/Extensions" or "C:\Program Files\Zope-2.7.4-0\Extensions" I prove with "os.getcwd()" but the value returned is for example:"/var/lib/zope2.7/instance/..." Thank in advance __________________________________ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/

3 3

RE: [Zope] Double and Triple Posts
by Andy Yates 21 Mar '05

21 Mar '05

> > When a user comes to the main page on my site 100+ values are loaded > > from a MySQL db and are stored in the SESSION object. These values are > > used to customize everything from text to images on the site. So, there > > are tons of reads and writes to the SESSION object going on all the > > time. > > > > The only problem I've seen is when I am sending email (multiple emails), > > processing credit cards (double,triple billing), and inserts into the db > > (duplicate inserts, key violations). > > What MySQL table type are you using? If you are using MyISAM (the > standard type) -- and it sounds like you are -- you are basically > doomed. However, if you convert your database to use InnoDB tables, > which support transactions, you should be fine. What versions of > MySQLdb and ZMySQLDA are you using, and did you explicitly disable > transaction support in ZMySQLDA? I guess I'm doomed. ;-) I use MyISAM tables mainly because that was all that was available way back when the database was created. That was when MySQL was not concerned with and was even proud that they were not SQL compliant. Now years and 100Gig+ later nobody is brave enough to change the table types. Looks like I should at least change the table type on tables that Zope write to. > -- > Computer interfaces should never be made of meat. > > Using GMail? Setting Reply-to address to <> disables this annoying feature. > > You are in a maze of twisty little passages all alike. > To go north, press 2. To go west, press 4. > To go east, press 6. To go south, press 8. > If you need assistance, press 0 and a little dwarf > will assist you. > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev )

2 1

running fsump.py
by Sean Hastings 20 Mar '05

20 Mar '05

I am trying to run fsdump, but am having import issues. Both my windows and linux boxes have Zope installed and running, but when I try to run fsdump.py on either machine, I get an import error: # python fsdump.py Traceback (most recent call last): File "fsdump.py", line 5, in ? from ZODB.fsdump import fsdump ImportError: No module named ZODB.fsdump and despite various attempts to set the PYTHONPATH, I have had no success getting python to find the ZODB.fsdump code. A Google search for this error is producing nothing. Any ideas?

2 1

apache rewrite blues.
by Wombie Tomek 20 Mar '05

20 Mar '05

i have an apache rewrite that looks like this: RewriteEngine On # RewriteRule ^/(.*) http://127.0.0.1:8085/VirtualHostBase/http/www.thoracicavity.com:80/wombie/… [L,P] RewriteRule ^(.*)$ http://www.thoracicavity.com:8085/VirtualHostBase/http/www.thoracicavity.co… [P,L] the former one didn't work any better than the one i'm currenly using. for whatever reason any sort of querystring i try to pass fails, and zope gives me a server request failure. Searches, Zphotos, anything using a querystring is broken... but everything else is perfect. What is wrong with my rewrite? my complete virtual host setup looks like this... and there is nothing unusual in my error log and my access log just looks just fine like the queries got passed ok. 68.93.160.73 - - [19/Mar/2005:17:58:21 +0100] "GET /search?SearchableText=adfasdfasd HTTP/1.1" 404 3392 "http://www.thoracicavity.com/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050225 Firefox/1.0.1" etc.... <VirtualHost 62.23.25.244> DocumentRoot /Data/sites/www.thoracicavity.com/web/ ServerName www.thoracicavity.com ErrorDocument 404 http://www.thoracicavity.com/404error.php CustomLog /Data/sites/www.thoracicavity.com/log/access.www.thoracicavity.com.log combined Alias /webalizer /Data/sites/www.thoracicavity.com/webalizer RewriteEngine On # RewriteRule ^/(.*) http://127.0.0.1:8085/VirtualHostBase/http/www.thoracicavity.com:80/wombie/… [L,P] RewriteRule ^(.*)$ http://www.thoracicavity.com:8085/VirtualHostBase/http/www.thoracicavity.co… [P,L] </VirtualHost> holden thomas

3 5