From nobody Mon Sep 15 09:08:52 2003 Received: from unknown (HELO mail.python.org) (12.155.117.29) by zulu.avenirsolutions.com with SMTP; 15 Sep 2003 10:47:14 -0000 Received: from localhost.localdomain ([127.0.0.1] helo=mail.python.org) by mail.python.org with esmtp (Exim 4.22) id 19yrss-0003oy-BA; Mon, 15 Sep 2003 07:51:10 -0400 Received: from stateless1.tiscali.cz ([213.235.135.70] helo=mail.tiscali.cz) by mail.python.org with esmtp (Exim 4.22) id 19yrsn-0003os-QY for zope@zope.org; Mon, 15 Sep 2003 07:51:05 -0400 Received: from gw (212.11.110.82) by mail.tiscali.cz (6.7.018) id 3F269CE000C0AC0D; Mon, 15 Sep 2003 13:45:06 +0200 Message-ID: <3F269CE000C0AC0D@stateless1.tiscali.cz> (added by postmaster@mail.tiscali.cz) From: "Jaroslav Lukesh" <lukesh@seznam.cz> To: <zope@zope.org>, "Sinclair" <fred.duwez@freesurf.fr> Subject: Re: [Zope] Re: Re: [Security] How to encrypt a Zope oid ? Date: Mon, 15 Sep 2003 12:06:47 +0200 X-FeelingPriority: Normal X-Priority: 3 X-Mailer: Muj vlastni Mail klient 1.00 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-2 Content-Transfer-Encoding: Quoted-Printable X-Spam-Status: OK (zopelist 0.000) Cc: X-BeenThere: zope@zope.org X-Mailman-Version: 2.1.2+ Precedence: list Reply-To: lsh@wo.cz List-Id: Users of the Z Object Publishing Environment <zope.zope.org> List-Unsubscribe: <http://mail.zope.org/mailman/listinfo/zope>, <mailto:zope-request@zope.org?subject=unsubscribe> List-Archive: <http://lists.zope.org/pipermail/zope> List-Post: <mailto:zope@zope.org> List-Help: <mailto:zope-request@zope.org?subject=help> List-Subscribe: <http://mail.zope.org/mailman/listinfo/zope>, <mailto:zope-request@zope.org?subject=subscribe> Sender: zope-bounces@zope.org Errors-To: zope-bounces@zope.org
Odes=EDlatel: Sinclair <fred.duwez@freesurf.fr> OK, but with Zope, you can build a application controller who call deco= de parameters and call the real zope object. Or a simple page page controller who encrypt his parameters : =20 Example : a document has url : $ZOPE/.../document_manager/document_37. =20 I wish the displayed url looks like : $ZOPE/.../document_manager?document=3Dk2316fge54dsgb51v3vsdv4 =20 That is the document_manager who translates an unreadable parameter to document real url.
Unreadable? Not available... But you could use POST request method with u= se of hidden form field. But I have tool for download these pages too. So yo= u will block only lamers, some search engines does hidden fields form submitting too. Regards JL. _______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )