Re: Hint: In case you are looking for button_to_remote

2008-02-18 Thread Cliff Wells
On Sun, 2008-02-17 at 13:06 -0800, Eric Ongerth wrote: So, you're thinking, OK, we have link_to_remote, which is what I've already used successfully to get one of my controllers to send back some text into my div, AJAX-style. Therefore why no button_to_remote? Why can I only do this with

Re: Authorize and Authentication with pylons

2008-02-18 Thread Luis Bruno
Chris AtLee escreveu: You can check it out here: http://atlee.ca/software/sentry Can't say that seeing the HTTP Basic example gave me much confidence. You might want to re-read that section. Don't take this very personally; I prefer to use security software created by nitpickers, if you see

Re: Pylons, sqlalchemy db awareness

2008-02-18 Thread Tomasz Nazar
Just noticed this not responded topic... maybe I can still help.. The Pylons session (nor even Java/Hibernate) DOES NOT have any knowledge of any parallel changes to underlying database that you use. So you a) shouldn't do concurrent modifications on database b) if you have to, then like you

Re: Authorize and Authentication with pylons

2008-02-18 Thread Luis Bruno
Ah, fooled again by the Reply-To:. What was meant as a very fast and private nitpick got to the list; sorry about that. Chris AtLee escreveu: Luis Bruno wrote: I prefer to use security software created by nitpickers, if you see what I mean. I don't quite understand what you mean.

Re: Authorize and Authentication with pylons

2008-02-18 Thread Chris AtLee
On Feb 18, 2008 12:27 PM, Luis Bruno [EMAIL PROTECTED] wrote: Chris AtLee escreveu: You can check it out here: http://atlee.ca/software/sentry Can't say that seeing the HTTP Basic example gave me much confidence. You might want to re-read that section. Don't take this very personally; I

Re: Hint: In case you are looking for button_to_remote

2008-02-18 Thread Eric Ongerth
That's a handy suggestion. The point of my post was in another direction: that at least some of the possible situations in which you might find yourself wishing for a button_to_remote helper, are actually clues that you're trying to do something the hard way, That was exactly the case in my

Re: Is it possible to steal the session in Pylons?

2008-02-18 Thread Bob Ippolito
On Feb 18, 2008 4:35 PM, Ben Bangert [EMAIL PROTECTED] wrote: On Feb 17, 2008, at 3:59 AM, Leo wrote: So, subj. If someone steals the session id from cookies, will he be able to use it? As with every other website out there yes. Only using IP-based restrictions will help, but

Re: Is it possible to steal the session in Pylons?

2008-02-18 Thread Gavin Engel
Yes, the fact that AOL customers have their ip addresses change every couple minutes is really annoying ... although, the first 3 parts of a 4-part ip address remains the same even for AOL customers, so you can do a partial ip-check for everyone. On Feb 18, 2008 4:35 PM, Ben Bangert [EMAIL

Re: Is it possible to steal the session in Pylons?

2008-02-18 Thread Ben Bangert
On Feb 17, 2008, at 3:59 AM, Leo wrote: So, subj. If someone steals the session id from cookies, will he be able to use it? As with every other website out there yes. Only using IP-based restrictions will help, but there's still quite a few people behind proxies, though nowhere near

Re: Store Mako templates in database

2008-02-18 Thread junya
Finally, I made render_string() as following, http://d.hatena.ne.jp/pyxis-dev/20080219 Junya Hayashi On 2月14日, 午前8:45, junya [EMAIL PROTECTED] wrote: Hi, Thanks Mike. I took things too seriously, and missed the meaning of Buffet. I'll define custom render() without Buffet. I was

Re: A few question about Making a Pylons Blog tutorial

2008-02-18 Thread Mike Orr
On Feb 16, 2008 5:29 AM, John Smith [EMAIL PROTECTED] wrote: * Step 1.3 - Models and Data ** Typo? Put this in the [app:man] section. should be Put this in the [app:main] section. Typo. Fixed. ** Unicode Because databases cannot store Unicode directly, the sqlalchemy.convert_unicode