Actually--the solution I posted is not satisfactory, since it produces a page with the config menus, etc. I suppose what I want then is to produce my own "manage_test" handler. -----Original Message----- From: Alexander Staubo <alex@mop.no> To: Zope Mailing List (E-mail) <zope@zope.org> Date: Sunday, June 20, 1999 10:05 PM Subject: RE: [Zope] Newbie Q: Passing REQUEST.form data to a Z SQL Method

If I understand your problem correctly, you'd like to pass form variables to the SQL Method? If so, here's one way of doing it:

<!--#call "Test_sql(REQUEST)"-->

This will essentially make REQUEST part of the namespace accessible to Test_sql. Note that this would lead to problems if your SQL Method refers to variables that should not be overrideable by REQUEST, such as security-related "where" conditions.

To avoid such cases, pass all pertinent variables explicitly, like so:

<!--#call "Test_sql(name = REQUEST.name, salary = salaryfilter)"-->

This prevents malicious users from requesting URLs like http://www.foo.com/ViewEmployees?name=myname&salary=40000 (assuming you want to block this, of course).

Does this answer your question?

-- Alexander Staubo http://www.mop.no/~alex/ "It has taken the planet Earth 4.5 billion years to discover it is 4.5 billion years old." --George Wald

...

-----Original Message----- From: zope-admin@zope.org [mailto:zope-admin@zope.org]On Behalf Of Rafael Alvarado Sent: 21. juni 1999 04:01 To: zope@zope.org Subject: [Zope] Newbie Q: Passing REQUEST.form data to a Z SQL Method

I have a Z SQL Method that takes an argument. It was constructed with the "Add" --> "Z SQL Method" form. The method works fine when the argument is provided by the automatically built search interface when testing it.

Now, how do I have the argument value supplied by a DTML page that passes the value directly as a REQUEST.form object?

It seems that this should be a very simply problem, yet I have search all available documents for an answer without success. Thanks to anyone who can help

Rafael C. Alvarado, Coordinator of Humanities and Social Sciences Computing McGraw Center for Teaching and Learning, Princeton University C-15-E Firestone Library, alvarado@princeton.edu

_______________________________________________ Zope maillist - Zope@zope.org http://www.zope.org/mailman/listinfo/zope

(For developer-specific issues, use the companion list, zope-dev@zope.org - http://www.zope.org/mailman/listinfo/zope-dev )

_______________________________________________ Zope maillist - Zope@zope.org http://www.zope.org/mailman/listinfo/zope

(For developer-specific issues, use the companion list, zope-dev@zope.org - http://www.zope.org/mailman/listinfo/zope-dev )