- Zope - Zope lists

404 on "/manage" frames with mod_rewrite
by Bernard Devlin 21 Aug '08

21 Aug '08

Hi folks, I managed to find some good information on putting zope behind apache and using mod_rewrite. This appears to be working fine as long as I'm using a non-framed page (and it works with SSL too). However, when I try to access the site using https://mysite.com/some_zope_page it works, but if I try https://mysite.com/zp/manage, I'm prompted for my zope admin credentials, and once I submit the credentials the framed portions are all 404d. When I check the url for one of the framed pages it looks like this: http://mysite.com:443/manage_workspace. Any idea if it is something I have misconfigured in Apache or is it something I've misconfiguration in Zope? Bernard

2 4

how to authenticate into zope as external user
by vaibhav pol 20 Aug '08

20 Aug '08

hiii, I am using zope-2.8.1 version and i wish to login into zope without facing the login window that zope provides i want to make one DTML page which will be used as login page for ZOPE and when I will enter username and password in DTML page, this information should be used for zope authentication.........ultimately i want one kind of hacking to directly enter into zope .... Thanks in Advance...

2 2

Re: [Zope] Need some help to get rid of an InvalidObjectReference exception
by chaouche yacine 20 Aug '08

20 Aug '08

--- On Wed, 8/20/08, chaouche yacine <yacinechaouche(a)yahoo.com> wrote: > From: chaouche yacine <yacinechaouche(a)yahoo.com> > Subject: Re: [Zope] Need some help to get rid of an InvalidObjectReference exception > To: "Dieter Maurer" <dieter(a)handshake.de> > Cc: zope(a)zope.org > Date: Wednesday, August 20, 2008, 3:22 AM > --- On Tue, 8/19/08, Dieter Maurer > <dieter(a)handshake.de> wrote: > > > From: Dieter Maurer <dieter(a)handshake.de> > > Subject: Re: [Zope] Need some help to get rid of an > InvalidObjectReference exception > > To: yacinechaouche(a)yahoo.com > > Cc: zope(a)zope.org > > Date: Tuesday, August 19, 2008, 11:16 AM > > chaouche yacine wrote at 2008-8-18 09:50 -0700: > > >Need some help to get rid of an > InvalidObjectReference > > exception > > >In my zope product, when I try to put some > specific > > object in the session, I get this : > > > > > >2008-08-18T14:51:02 ERROR(200) SiteError > > > http://www.afdas.com:8091/noyauafdas/tests/testAdresses > > >Traceback (most recent call last): > > > File > > > "/opt/Zope-2.7/lib/python/ZPublisher/Publish.py", > > line 107, in publish > > > transactions_manager.commit() > > > File > > > "/opt/Zope-2.7/lib/python/Zope/App/startup.py", > > line 222, in commit > > > get_transaction().commit() > > > File > > > "/opt/Zope-2.7/lib/python/ZODB/Transaction.py", > > line 241, in commit > > > ncommitted += self._commit_objects(objects) > > > File > > > "/opt/Zope-2.7/lib/python/ZODB/Transaction.py", > > line 356, in _commit_objects > > > jar.commit(o, self) > > > File > > > "/opt/Zope-2.7/lib/python/ZODB/Connection.py", > > line 452, in commit > > > dump(state) > > >InvalidObjectReference: Attempt to store an object > from > > a foreign database connection > > > > A given persistent object can only be in one (ZODB-) > > database, not in several > > databases at the same time. > > > > You must copy the persistent object, when you want it > to be > > stored > > (also) in another (ZODB-) database. > > > > You can use the "_getCopy(destination)" > method to > > create such > > a copy. "_getCopy" is defined by > > "OFS.CopySupport.CopySource" inherited > > by most Zope objects. > > > > > > > > -- > > Dieter > > I narrowed the code to what is necessary to fire this > exception, and here is the tarball for those who want to > test it live > http://yacinechaouche.googlepages.com/InvalidObjectReferenceExample.tgz > > This is the directory contents : > > + InvalidObjectReferenceExample > \_ __init__.py > \_ NonZODBObject.py > \_+ zmi > \_ ZODBLivingObjectAddForm.pt > \_ ZODBLivingObject.py > > ================ > NonZODBObject.py > ================ > class NonZODBObject: > """ > Hello, i do not live in the ZODB > """ > > def __init__(self,p_context): > """ > """ > # This is the evil line. > self.context = p_context > > =================== > ZODBLivingObject.py > =================== > from OFS.SimpleItem import SimpleItem > from NonZODBObject import NonZODBObject > > > class ZODBLivingObject(SimpleItem) : > """ > Hello, I live in the ZODB. > """ > meta_type = "ZODBish" > def __init__(self): > """ > """ > self.id = "ZODBish" > self.title = "ZODBish" > > def breakEverything(self): > """ > """ > nonZODBish = NonZODBObject(self) > # This line breaks everything. > > self.REQUEST.SESSION.set('breakish',nonZODBish) > # This can be seen in the console if runzope > print "it's me",nonZODBish.context > return nonZODBish.context > > > > __init__.py contains the code necessary to create a ZODBish > in the ZODB through the ZMI > zmi contains the form that adds a ZODBish through the ZMI > > As you see, I do not intentionally copy objects from one > ZODB to another... Except maybe if the session has a > separate storage and that this breaks everything. But then, > I could not even use the _getCopy method because nonZODBish > do not have a _p_jar attribute. > > Any help or comment would be appreciated . No, I got it all wrong, it is much simpler than that : I cannot put any ZODB living object into the session, be it a python script, a page template, anything... this is not product specific. So the question is now : is there another way to put some ZODB objects in the session for future use ? because there is no reason to create the same object twice or thrice in my product so I want it to stay in the session. Thanks.

2 1

products in client instances
by David Bear 20 Aug '08

20 Aug '08

If I have zeo and 3 clients (client1, client2, client2) its seems that it would be convenient to have the Products directory be a symlink to a master products directory. Is there any reason not to do this? Or, is there a 'super directory' where all products can be installed for all zeo clients already? -- David Bear College of Public Programs at ASU 602-464-0424

2 1

Re: [Zope] emails
by Michael Arnoldy 18 Aug '08

18 Aug '08

In all of my tries to stop the emails below, I may have blocked any replies you might have sent me. If so you can reach me at my secure address: michaelarnoldy(a)ca.rr.com ----- Original Message ---- From: Michael Arnoldy <michaelarnoldy(a)yahoo.com> To: Zope(a)zope.org Sent: Monday, August 18, 2008 11:06:45 AM Subject: [Zope] emails I am now and have been getting emails from everyone who comunicates with your site. There were seven new emails this am. I have done every I know of to stop them. All of the unwanted emails I get look like this in the subject line: [Zope] Need so...etc. Re: [Zope] SCRIPT (Python) ...............etc. [Zope] Searching for ............ etc. Re: [Zope] trying ZODB ........etc. They all come frome individuals and have [Zope] in the subject line. Can you help me or refer me to someone who can. What would do if you were getting as many as 27 of these every day? Please help me. Michael Arnoldy at: michaelarnoldy(a)yahoo.com I have been getting these emails ever since I first visited your site.

2 1

emails
by Michael Arnoldy 18 Aug '08

18 Aug '08

I am now and have been getting emails from everyone who comunicates with your site. There were seven new emails this am. I have done every I know of to stop them. All of the unwanted emails I get look like this in the subject line: [Zope] Need so...etc. Re: [Zope] SCRIPT (Python) ...............etc. [Zope] Searching for ............ etc. Re: [Zope] trying ZODB ........etc. They all come frome individuals and have [Zope] in the subject line. Can you help me or refer me to someone who can. What would do if you were getting as many as 27 of these every day? Please help me. Michael Arnoldy at: michaelarnoldy(a)yahoo.com I have been getting these emails ever since I first visited your site.

2 1

Trying ZODB with a background in RDBMS
by Phillip B Oldham 18 Aug '08

18 Aug '08

Hi all. I'm playing with standalone ZODB at the moment trying to get a better understanding of its use in applications. I come from a PHP/MySQL background, and I'm taking my first steps with Python at the same time. One of the things I'm not understanding about ZODB is assigning incremental IDs to objects. For instance, if I were to be writing a support-ticket system I'd want to give each ticket a unique number, but one that's "human-useable" (otherwise you could just use a UUID - try giving one of those over the phone!). Also, how would one add a new item to the db in this way? For instance: class Ticket(Persistence): def __init__(self): self.id = '' # How do I add a new incremental ID here? # and later on in the app tkt = Ticket() dbroot[?????] = tkt How would one assign a unique ID to the root at that point? -- Phillip B Oldham phillip.oldham(a)gmail.com +44 (0) 7525 01 09 01

6 5

python split
by Garry Saddington 17 Aug '08

17 Aug '08

Is it possible to split a string at the first occurence of a non-digit character using a python script in zope, or does this need an external method for security purposes? regards garry

3 2

uncataloging
by Darryl Caldwell 17 Aug '08

17 Aug '08

Hey folks, I have looked at the source of Catalog.py but am still confused about what parameters I need to uncatalog an object. Is the uid the same as the object id? That which is returned from obj.getId(), or is it the same as the object Identifier listed on the Catalog tab within the catalog? Thanks in advance. Code samples welcome. -d

5 5

Script (Python) insecure ?
by M.-A. Lemburg 16 Aug '08

16 Aug '08

Hello, after Chris Withers lightning talk at EPC 2008 I had a closer look at the implementation of Python Scripts in Zope 2.11. While I have not yet been able to break out of the restricted environment without help from installed products, there are a few denial-of-service attacks which can easily be deployed on sites allowing adding Python Scripts to a user folder: 1. Attack: Put this into a "Script (Python)" object and run it: return 'kaboom'.encode('test.testall') This results in a denial-of-service, since Zope will hang running the Python test suite. The reason for this is a problem in the way the encoding search function works in Python 2.4. This was changed in 2.5 to no longer allow searching for codecs outside the encodings package. 2. Attack: Put this into a "Script (Python)" object and run it: raise SystemExit This shuts down Zope. The Python Script environment should obviously catch such exceptions and not let them propagate up the call stack. I found the second attack rather surprising, as it doesn't require deep knowledge about Python's interna. Regards, -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Aug 12 2008) >>> Python/Zope Consulting and Support ... http://www.egenix.com/ >>> mxODBC.Zope.Database.Adapter ... http://zope.egenix.com/ >>> mxODBC, mxDateTime, mxTextTools ... http://python.egenix.com/ ________________________________________________________________________ :::: Try mxODBC.Zope.DA for Windows,Linux,Solaris,MacOSX for free ! :::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611

8 18