- Zope - Zope lists

Re: eval in DTML
by Josef Meile 07 Feb '04

07 Feb '04

> You can't use 'eval' in either a DTML method or a python script. You have > to create an external method to use 'eval'. It's a bad idea. When I was a newie, I also figured out the same solution, but somebody said: "What if instead of a list, some bad user pass: rm -Rf?" So, it seems an useful command, but in fact it is dangerous. My suggestion for the thread author: if you can't send a list as somebody said, then remove the first and last square braces and do a split. Off couse this will only work if your list is very simple; on the contrary, if you use lists of lists, you will have to do some kind of recursive function. Regards, Josef

3 2

AntiVir ALERT [your mail: "*SPAM* Score: 07.54/06.50 - HELLO"]
by AvMailGate＠mailhost.dueihh.de 07 Feb '04

07 Feb '04

* * * * * * * * * * * * * * * AntiVir ALERT * * * * * * * * * * * * * * * This version of AntiVir is licensed and full featured. AntiVir has detected the following in a mail from your address: Worm/MyDoom.A2 virus The mail was not delivered. Please remove any potential malicious software from your computer before sending a new mail with attachments. Mail-Info: --8<-- Message-Id: <20040207130619.7D1DA123F3(a)mailhost.dueihh.de> From: zope(a)zope.org To: boers(a)duei.de Date: Sat, 7 Feb 2004 14:06:15 +0100 Subject: *SPAM* Score: 07.54/06.50 - HELLO --8<-- -- AntiVir for UNIX Copyright (C) 1994-2002 by H+BEDV Datentechnik GmbH. All rights reserved. For more information see http://www.antivir.de/ or http://www.hbedv.com/

1 0

RE: [Zope] Persistent references to persistent objects ?!?!
by Jean-Francois.Doyon＠CCRS.NRCan.gc.ca 07 Feb '04

07 Feb '04

Dieter, Hmmm interesting point. I suppose a basic rule of thumb would be that the reference should never be stored directly as an attribute of a folderish type ? I can imagine many useful scenarios where keeping references to objects can be very handy (Versioning, workflow, lists of objects, etc ...) ... Although I have to admit the symlink think had never really even occured to me. I'd imagine instead maintaining a list of references for instance, maybe stored as an attribute of some other non-folderish type ... you know maybe build some content-type class that, as part of it's functionality, keeps references to objects ? This should make it safe from any unexpected behavior like the one you describe, right ? Thanks for the insight ... J.F. -----Original Message----- From: Dieter Maurer [mailto:dieter@handshake.de] Sent: Friday, February 06, 2004 3:57 PM To: Jean-Francois.Doyon(a)CCRS.NRCan.gc.ca Cc: zope(a)zope.org Subject: Re: [Zope] Persistent references to persistent objects ?!?! Jean-Francois.Doyon(a)CCRS.NRCan.gc.ca wrote at 2004-2-5 16:38 -0500: >I was toying with a few ideas, and discovered that I can actually store in a >persistent manner references to other persistent objects !! > ... >This is nice because it allows to point to an object without using paths and >traversal (So it's quick and dirty), and the reference is maintained through >a rename. > >I can see some problems related to security, such as if traversal is not >used, then some security can be by-passed ... Effectively, the same object resides then at different places in the Zope hierarchy. This can be very confusing: We used Shane's "symlink" product that has similar properties. A colleague was able to delete the complete ZCatalog content by deleting an object containing a symlink. The deletion caused a recursive "manage_beforeDelete" which followed the symlink and unindexed all objects referenced from the link target. Similar things may happen with your "multi-place" objects (especially, "catalog"s and "acquisition" may work inconsistently, depending how you access your objects). -- Dieter

3 2

fees
by Ziyian Kwan 07 Feb '04

07 Feb '04

Hi Sweetie, You saw the email from James. I'll visit the property shop tomorrow. All is well. love, R.

1 0

Apache rewrite rules
by John Poltorak 06 Feb '04

06 Feb '04

When setting up rewrite rules for Apache for using a Zope virtual host, the Zope book examples show [L,P] at the end of the line. Anyone know what they stand for? My Zope Bible just has a [P]. Enquiring minds need to know. -- John

3 2

URLs expose information which we'd like to hide
by Dennis Allison 06 Feb '04

06 Feb '04

The parameters passed by GET and, to a lesser extent, the URLs themselves, represent a security issue in one of our systems. One solution, which we tied and have had to back-off from, is to configure the browser window to simply not display the URL and Status lines. The problem there is that the pop-up blockers (now becoming common) interfere. Another, no longer available )-: , would be to exploit the URL hack that MS has just release an IE patch to fix. A partial solution would be to make POST not GET the standard for parameter transmital. Has anyone tried this? I suspect there are all sorts of hidden gotchas. Suggestions?

4 5

multiple zopes with apache
by Sean Kelley 06 Feb '04

06 Feb '04

Hi, I just setup apache 2 on windows on port 80 Now I want it to proxy a few zope instances. I setup zope to run on 8080 and all is well. I have an apache subfolder proxying the instance of zope. Question is, what is the best way to add addtional zope versions? Should I just run them with another port number? I assume that the apache server will hand everything off as 80 so I could choose something like 8081 for my second zope instance with no problems right? Is this how its normally done or is there another way?

3 2

Re: [Zope] Creating an instance of another class?
by J C Lawrence 06 Feb '04

06 Feb '04

On Thu, 5 Feb 2004 19:39:22 +0100 Dieter Maurer <dieter(a)handshake.de> wrote: > J C Lawrence wrote at 2004-2-4 20:25 -0500: >> What is the correct way to use the OFS to create an instance of a >> product within an object? > <objectManagerDestination>.manage_addProduct[<productName>]. > <constructor>(<arguments>) This is not moving as elegantly as I'd expected. Any example cases out there? -- J C Lawrence ---------(*) Satan, oscillate my metallic sonatas. claw(a)kanga.nu He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

3 2

bug in xmlrpc
by Jerry 06 Feb '04

06 Feb '04

Hi Zopeople, I upgraded to python 2.3 and now my program that calls routines via XMLRPC is broken. I am using the unmodofied xmlrpcBasicAuth module I downloaded some time last year and code that worked fine on 2.2 now generates: >>> x=myserver.myfunction('xxx') Traceback (most recent call last): File "<stdin>", line 1, in ? File "C:\app\Python23\lib\xmlrpclib.py", line 1029, in __call__ return self.__send(self.__name, args) File "C:\app\Python23\lib\xmlrpclib.py", line 1316, in __request verbose=self.__verbose TypeError: request() got an unexpected keyword argument 'verbose' I don't see how I could be doing anything wrong, but if there was something wrong with xmlrpclib.py I would think I would be able to find something about it on zope.org or in the mailing lists. I REALLY need to use XML-RPC with authorization for my program to work. Anyone have any fixes or suggestions? -- Jerry (Mailed safely with The Bat! 2.02.3 CE) ___________________________ Always and never are two words you should always remember never to use. -- Wendell Johnson

2 2

Persistent references to persistent objects ?!?!
by Jean-Francois.Doyon＠CCRS.NRCan.gc.ca 06 Feb '04

06 Feb '04

G'day, I was toying with a few ideas, and discovered that I can actually store in a persistent manner references to other persistent objects !! I for instance have a persistent object that has, as an attribute, a reference to another persistent object (Done using Python's standard shallow copying: self.attribute = object). I use this in a scenario much like DB connections/ZSQL Methods, where the ZSQL MEthod would have a stored persistent reference to it's connection object. This is nice because it allows to point to an object without using paths and traversal (So it's quick and dirty), and the reference is maintained through a rename. I can see some problems related to security, such as if traversal is not used, then some security can be by-passed ... In my few years of using Zope I've never heard of any one using this ... Has anybody ? What are the official pro's and con's ? Thanks, Jean-François Doyon Internet Service Development and Systems Support / Développement des services et soutien de systèmes Internet GeoAccess Division / Division GéoAccès Canada Center for Remote Sensing / Centre canadien de télédétection Natural Resources Canada / Ressources naturelles Canada http://atlas.gc.ca Phone: (613) 992-4902 Fax: (613) 947-2410

2 1