[Zope] Newbie Q: Passing REQUEST.form data to a Z SQL Method

[Michel Pelletier]

> -----Original Message-----
> From: Rafael Alvarado [mailto:alvarado@phoenix.Princeton.EDU]
> Sent: Monday, June 21, 1999 9:00 AM
> To: zope@zope.org
> Subject: Re: [Zope] Newbie Q: Passing REQUEST.form data to a Z SQL
> Method
> 
> 
> Actually--the solution I posted is not satisfactory, since it 
> produces a
> page with the config menus, etc.  I suppose what I want then 
> is to produce
> my own "manage_test" handler.
> 

Nope, I think your missing a little piece of Zen here.  What it sounds
like you want to do is call a ZSQL method and format the data in your
own way.  This does not require you writing 'handlers', this can be done
in straight DTML.

<ul>
<!--#in "mySQLMethod(name = REQUEST.name, salary = salaryfilter)"-->
	<li><!--#var name--> gets paid <!--#salary--></li>
<!--#/in-->
</ul>

ZSQL methods return sequences of results.  The results are rows in the
database which match your SQL query.  Given this, you can impliment an
HTML form which collects data, whose action="" is to call the DTML
method which contains the code above, whose job is to call the ZSQL
method and format the results of the query into an HTML list.


The 'manage_test' method is just a hardwired result form, it's magic is
based exactly on what I've detailed here.

-Michel

> -----Original Message-----
> From: Alexander Staubo <alex@mop.no>
> To: Zope Mailing List (E-mail) <zope@zope.org>
> Date: Sunday, June 20, 1999 10:05 PM
> Subject: RE: [Zope] Newbie Q: Passing REQUEST.form data to a 
> Z SQL Method
> 
> 
> >If I understand your problem correctly, you'd like to pass form
> >variables to the SQL Method? If so, here's one way of doing it:
> >
> >  <!--#call "Test_sql(REQUEST)"-->
> >
> >This will essentially make REQUEST part of the namespace 
> accessible to
> >Test_sql. Note that this would lead to problems if your SQL Method
> >refers to variables that should not be overrideable by 
> REQUEST, such as
> >security-related "where" conditions.
> >
> >To avoid such cases, pass all pertinent variables 
> explicitly, like so:
> >
> >  <!--#call "Test_sql(name = REQUEST.name, salary = salaryfilter)"-->
> >
> >This prevents malicious users from requesting URLs like
> >http://www.foo.com/ViewEmployees?name=myname&salary=40000 
> (assuming you
> >want to block this, of course).
> >
> >Does this answer your question?
> >
> >--
> >Alexander Staubo             http://www.mop.no/~alex/
> >"It has taken the planet Earth 4.5 billion years to discover it is
> >4.5 billion years old." --George Wald
> >
> >>-----Original Message-----
> >>From: zope-admin@zope.org [mailto:zope-admin@zope.org]On Behalf Of
> >>Rafael Alvarado
> >>Sent: 21. juni 1999 04:01
> >>To: zope@zope.org
> >>Subject: [Zope] Newbie Q: Passing REQUEST.form data to a Z 
> SQL Method
> >>
> >>
> >>I have a Z SQL Method that takes an argument.  It was
> >>constructed with the
> >>"Add" --> "Z SQL Method" form.  The method works fine when the
> >>argument is
> >>provided by the automatically built search interface when 
> testing it.
> >>
> >>Now, how do I have the argument value supplied by a DTML page
> >>that passes
> >>the value directly as a REQUEST.form object?
> >>
> >>It seems that this should be a very simply problem, yet I have
> >>search all
> >>available documents for an answer without success.  Thanks to
> >>anyone who can
> >>help
> >>
> >>Rafael C. Alvarado, Coordinator of Humanities and Social
> >>Sciences Computing
> >>McGraw Center for Teaching and Learning, Princeton University
> >>C-15-E Firestone Library, alvarado@princeton.edu
> >>
> >>
> >>_______________________________________________
> >>Zope maillist  -  Zope@zope.org
> >>http://www.zope.org/mailman/listinfo/zope
> >>
> >>(For developer-specific issues, use the companion list,
> >>zope-dev@zope.org - http://www.zope.org/mailman/listinfo/zope-dev )
> >>
> >
> >
> >_______________________________________________
> >Zope maillist  -  Zope@zope.org
> >http://www.zope.org/mailman/listinfo/zope
> >
> >(For developer-specific issues, use the companion list,
> >zope-dev@zope.org - http://www.zope.org/mailman/listinfo/zope-dev )
> >
> 
> 
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://www.zope.org/mailman/listinfo/zope
> 
> (For developer-specific issues, use the companion list,
> zope-dev@zope.org - http://www.zope.org/mailman/listinfo/zope-dev )
>