Re: [Zope] question on simple_send in MailHost

2006-07-19 Thread Tino Wildenhain
) allow_class(encode_base64) would roughly do it. Pack it nicely, add some ZMI howtos and be ready :-) Regards Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related

Re: [Zope] Catalog aware

2006-07-19 Thread Tino Wildenhain
Garito wrote: Andreas Jung escribió: --On 19. Juli 2006 09:34:58 +0200 Garito [EMAIL PROTECTED] wrote: Andreas Jung escribió: --On 18. Juli 2006 15:14:54 +0200 Garito [EMAIL PROTECTED] wrote: Hi all! Is possible to create an object (for example a Page Template) and make it catalog

Re: [Zope] external method with import tarfile

2006-07-19 Thread Tino Wildenhain
Alan wrote: Hi there! I managed to find the problem and the solution. First, I've forgot to mention that in my script, oname is an uploaded file. I just inserted a f.close() and voilá! def upload_external(self,file,REQUEST): import os,tarfile ... f=open(oname,wb)

Re: [Zope] Catalog aware

2006-07-19 Thread Tino Wildenhain
Garito wrote: Tino Wildenhain escribió: Garito wrote: Andreas Jung escribió: --On 19. Juli 2006 09:34:58 +0200 Garito [EMAIL PROTECTED] wrote: Andreas Jung escribió: --On 18. Juli 2006 15:14:54 +0200 Garito [EMAIL PROTECTED] wrote: Hi all! Is possible to create an object

Re: [Zope] Catalog aware

2006-07-19 Thread Tino Wildenhain
Garito wrote: ... Sure, but I can't create a new product for every product I'll use only to do it catalog aware, isn't it? Yes you can. Why not? I mean you are using them - so you can use your products instead as well. Yes but what if tomorrow you create a product? need work to

Re: [Zope] Catalog aware

2006-07-19 Thread Tino Wildenhain
Garito wrote: Tino Wildenhain escribió: Garito wrote: ... Sure, but I can't create a new product for every product I'll use only to do it catalog aware, isn't it? Yes you can. Why not? I mean you are using them - so you can use your products instead as well. Yes

Re: [Zope] ZSQL Method Question

2006-07-18 Thread Tino Wildenhain
Peter Bengtsson wrote: What if you have 1,000,000 requests/sec? What if between the INSERT and the LAST_INSERT_ID() another INSERT is made? I use PostgreSQL and with postgres you can always ask the sequence what the next id is going to be. It goes something like this:: next_id =

Re: [Zope] Using the DTML REQUEST Object

2006-07-18 Thread Tino Wildenhain
the DTML templates with ZPT templates. In short, if you dont do application logic with it, even DTML is kinda acceptable. (That said: no call, set, etc. in it) Regards Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo

Re: [Zope-dev] Should PageTemplate._text be a unicode or an encoded string in Zope 2.9.3?

2006-07-17 Thread Tino Wildenhain
Chris Withers wrote: Andreas Jung wrote: I've had problems when it's an encoded string, but that seems to be what is stored when you save a ZPT via the ZMI or WebDAV... ZPT in pre-Zope 2.10 knows nothing about unicode...it can be anything :-) And what about 2.10? FWIW, this seems to be

Re: [Zope-dev] Should PageTemplate._text be a unicode or an encoded string in Zope 2.9.3?

2006-07-17 Thread Tino Wildenhain
Andreas Jung wrote: --On 17. Juli 2006 17:11:54 +0100 Chris Withers [EMAIL PROTECTED] wrote: Andreas Jung wrote: Zope 2.10 comes with the ZPT implementation of Zope 3 which works nicely with unicode strings. However the 2.10 won't enforce the use of unicode strings for backward

Re: [Zope-dev] 2.9.4? reStructuredText support?

2006-07-08 Thread Tino Wildenhain
... You seem to be the only one championing TTW reST? I am only champion against crude removal of features and against and a shortsighted preception. I'm for keeping it (or something like it) too. That doesn't deserve an answer. Are you unwilling to write the tests necessary to keep

Re: [Zope-dev] 2.9.4? reStructuredText support?

2006-07-08 Thread Tino Wildenhain
Jim Fulton wrote: ... You mean auditing. Testing would not help imho. Testing only checks if expected behavior still works. And nobody expects the spanish inquisiton *wink* ;) You can test that trying to do fil-inclusion fails. For example if I'd were the one who would have written the

Re: [Zope] attaching an image to an email

2006-06-29 Thread Tino Wildenhain
Kate Legere schrieb: I get a result like : Cv/Y/+AAEEpGSUYAAQEBAEgASAAA/9sAQwAHBAQEBQQHBQUHCgcFBwoMCQcHCQwNCwsMCwsNEQ0N DQ0NDRENDxAREA8NFBQWFhQUHh0dHR4iIiIiIiIiIiIi/9sAQwEIBwcNDA0YEBAYGhURFRogICAg ICAgICAgICAgISAgICAgICEhISAgICEhISEhISEhIiIiIiIiIiIiIiIiIiIi/8AAEQgGggXsAwER

Re: [Zope-PAS] New to PAS

2006-06-27 Thread Tino Wildenhain
documentation would be nice. I looked around google.com but nothing else immediately popped into view for me. There isnt even an unlocalized documentation as far as I know ;) (beside the source of course ;) Feel free to pop in. Regards Tino Wildenhain

Re: [Zope] Content Disposition - Download files

2006-06-26 Thread Tino Wildenhain
) context.REQUEST.RESPONSE.setHeader('Content-Disposition','attachment; filename=%s' % context.getId()) Regards Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http

Re: [Zope] Content Disposition - Download files

2006-06-26 Thread Tino Wildenhain
context.REQUEST.RESPONSE.setHeader('Content-Disposition','attachment; filename=%s' % context.getId()) Nice idea, but what i need is different. In PHP there is a function called readfile, i'm sure there is something also in Zope, but i'm not able to find it! No, I can tell you you are on the

Re: [Zope] Searching for and displaying properties

2006-06-24 Thread Tino Wildenhain
Sinang, Danny wrote: Dear All, I managed to add a property to an object by using the manage_addproperty () method. However, if I don't issue a manage.reindexIndex () for the new property, it won't come out in the catalog search results. manage_addProperty does not trigger recataloguing

Re: [Zope] Basic Authentication SSL Redirector

2006-06-23 Thread Tino Wildenhain
the same time. (For example you cannot really log out with Basic Auth) Regards Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http

Re: [Zope] Re: Basic Authentication SSL Redirector

2006-06-23 Thread Tino Wildenhain
Josef Meile schrieb: After having started the thread about securing CookieCrumbler[1], I figured out that it was better to secure Basic Authentication instead. So, I just Which is actually identically :-) Its just a different HTTP-Header involved :-) Yes, but you won't send your

Re: [Zope] Re: Basic Authentication SSL Redirector

2006-06-23 Thread Tino Wildenhain
Josef Meile schrieb: Yes, but you won't send your credentials in plane text as you do with CookieCrumble, will you? Well, its more or less exactly the same as with BasicAuth :-) (base64 plaintext vs. plaintext in html forms does not really matter) Yes, but if you set only the authentication

Re: [Zope] ExternalMethod for exporting un-pickled Office files to the filesystem etc

2006-06-22 Thread Tino Wildenhain
this over ZEO via zopectl run thescript.py somewhere/to/targetdir There are possibly many improvements (creating subdirectories, fixing extensions and so on) Regards Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman

Re: [Zope] ExternalMethod for exporting un-pickled Office files to the filesystem etc

2006-06-22 Thread Tino Wildenhain
() for that) directory creating isnt that hard either, its just some recursion and checking... Regards TIno Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists

Re: [Zope] ExternalMethod for exporting un-pickled Office files tothe filesystem etc

2006-06-22 Thread Tino Wildenhain
usually dont wear an opaque string with data but linked PData elements which could be read block by block instead of the simple str() in my implemention. Regards Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope

Re: [Zope] Transaction rollback

2006-06-21 Thread Tino Wildenhain
Luiz Fernando B. Ribeiro schrieb: I need to return an error page with instructions after verifying a request but I need to do a rollback. How can I call a full rollback, like when using raise(), inside a python script and redirect to an error page. I found many posts about

Re: [Zope] How to commit a piece of data in a transaction when the transaction is being aborted later

2006-06-21 Thread Tino Wildenhain
William Heymann schrieb: On Tuesday 20 June 2006 12:47, Chris McDonough wrote: I'd just record the data from Verisign in response to their POST (do nothing else) and come along later with a separate request to pick through the data to do postprocessing on it every so often; then the data

Re: [Zope] Display Image Object in DTML

2006-06-21 Thread Tino Wildenhain
jose carlos schrieb: Hi all, i'm trying to show a Image object in dtml but i don known how to do it. i have a user object and this user have a jpg foto atributte. this foto atributte is a instance of OFS.Image and when i try to view in dtml only view Ascii character.. i think about to create

Re: [Zope] Display Image Object in DTML

2006-06-21 Thread Tino Wildenhain
Andreas Jung schrieb: --On 21. Juni 2006 10:00:12 +0200 jose carlos [EMAIL PROTECTED] wrote: Hi all, i'm trying to show a Image object in dtml but i don known how to do it. i have a user object and this user have a jpg foto atributte. this foto atributte is a instance of OFS.Image and when

Re: [Zope] How to commit a piece of data in a transaction when the transaction is being aborted later

2006-06-21 Thread Tino Wildenhain
William Heymann schrieb: On Wednesday 21 June 2006 01:17, Tino Wildenhain wrote: William Heymann schrieb: That is probably a good idea for long term to change things that way and I would like to rewrite it. However right now I don't really want to rewrite the way the current system works

Re: [Zope] Nested dtml tags

2006-06-20 Thread Tino Wildenhain
Jonathan Bowlas schrieb: Hi All, How can I do this with dtml? select name=MODLEVEL size=1 dtml-if expr=dtml-var name=MODLEVEL == 1 #I need an alternative to this. option value=1 selected=selected1/option option value=22/option Etc, etc.

Re: [Zope] Nested dtml tags

2006-06-20 Thread Tino Wildenhain
Jonathan Bowlas schrieb: Hmm, this doesn't appear to work. Let me explain what I'm trying to do. I have a Z SQL Method called selectmoduleinfoMethod that contains the SQL: SELECT * FROM RECMGR_EL_MODULE_Query WHERE MODCODE = dtml-sqlvar MODCODE type=string You should never use

Re: [Zope] converting Dictionary to Result

2006-06-19 Thread Tino Wildenhain
Alric Aneron wrote: Hello, I have a dictionary object and a result set object (that was returned from a ZSQL method). Is there any way I can merge them into one variable and use them in a dtml-in statement? You should know which one should update which one. So assuming your dictionary has

Re: [Zope] When is an empty list not an empty list?

2006-06-18 Thread Tino Wildenhain
John Schinnerer wrote: Aloha, I have a python script, getCatalogItems(), which returns a (possibly empty) list resulting from a catalog query. The lone parameter is the sort index; the rest of the query is taken from the request. Anyhow... If nothing was found, I don't want to display an

Re: [Zope] manage_changeProperties has strange side effect on response Content-Type.

2006-06-16 Thread Tino Wildenhain
: 1.) the excat zope version 2.) manage_page_charset settings 3.) default encodings set in zope.conf etc. Regards Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding

Re: [Zope-dev] Non-Latin-1 properties

2006-06-08 Thread Tino Wildenhain
Andreas Jung schrieb: --On 8. Juni 2006 15:31:09 +0200 Yves Bastide [EMAIL PROTECTED] wrote: Hi! Sorry to beat a dead horse: the ZMI doesn't allow using non-Latin-1 properties. huh? How about using the utext and ustring properties? they (sorry ;) suck :-) And they arent available in

Re: [Zope] dtml forwarding request

2006-06-08 Thread Tino Wildenhain
dont remember the name w/o looking at the source. Regards Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope

Re: [Zope-dev] tempstorage to ZEO?

2006-05-31 Thread Tino Wildenhain
Sidnei da Silva schrieb: I was looking, and trying to understand why 'tempstorage' is not included in the ZODB. Since some people might want to share sessions between ZEO clients, and that 'tempstorage' is what is mounted as '/temp_folder/session_data', why not make that easy to mount via ZEO?

Re: [Zope-dev] Re: [ZODB-Dev] Re: tempstorage to ZEO?

2006-05-31 Thread Tino Wildenhain
Sidnei da Silva wrote: On Wed, May 31, 2006 at 02:12:48PM -0400, Tres Seaver wrote: | -BEGIN PGP SIGNED MESSAGE- | Hash: SHA1 | | Eric Brun wrote: | Hi, | | I have bad experence with tempstorage on ZEO (FileStorage with no undo). | With site with 18000 users (300 per

Re: [Zope] Zope will not allow access after IP address change

2006-05-26 Thread Tino Wildenhain
much sense...) Regards Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org

Re: [Zope] Chrooted zope /dev requirements?

2006-05-19 Thread Tino Wildenhain
Michael Dexter wrote: Hello, Has anyone chrooted Zope/Python on OpenBSD or other and determined what minimum devices are required for correct functionality? Willing to share? :) Well, all you need is python and the libs. Otoh, what do you think you get from chrooting it? :-) Zope should

Re: [Zope] windows python differences

2006-05-19 Thread Tino Wildenhain
garry saddington wrote: This code on linux works without a problem ispell = os.popen(echo + word + | /opt/scholarpack/ancillary/ispell/bin/ispell -a) ispell.readline sentence = ispell.readline() What if the word is like `rm -rf /` for example? Doing something like that above is

Re: [Zope] windows python differences

2006-05-19 Thread Tino Wildenhain
garry saddington wrote: On Fri, 2006-05-19 at 09:01 +0200, Tino Wildenhain wrote: garry saddington wrote: This code on linux works without a problem ispell = os.popen(echo + word + | /opt/scholarpack/ancillary/ispell/bin/ispell -a) ispell.readline sentence = ispell.readline() What

Re: [Zope] Preventing files from being viewed by web clients

2006-05-08 Thread Tino Wildenhain
Brian wrote: I have a flash app that accesses .xml files. The source is viewable and some creative crackers have figured out how to meld a url together to get vital information from those .xml's. Well, dont put vital information there :-) I need to prevent the web client from directly

Re: [Zope] how to decode base64 in DTML?

2006-05-04 Thread Tino Wildenhain
Jaroslav Lukesh wrote: From: Andreas Jung [mailto:[EMAIL PROTECTED] import cStringIO import mimetools import binascii binascii.a2b_base64('YWxla2liYW5nb0B6dWcuY3o=\n') in commandline python works OK. Move such code inside a PythonScript..such code does not belong into DTML.. it just bad

Re: [Zope] Permissions, files and folders

2006-04-21 Thread Tino Wildenhain
Erik Billing schrieb: Ah! Thanx! DocFinder will shore come very useful in time =) Btw, what editor would you recommend for writing python outside Zope. I've frequently used Eclipse with PyDev before, but it's a bit slow and heavy. I've looked around a bit on the free editors without finding

Re: [Zope] REQUEST.form variables order

2006-04-20 Thread Tino Wildenhain
Gaute Amundsen schrieb: On Wednesday 19 April 2006 21:47, Tino Wildenhain wrote: Gaute Amundsen wrote: I want to retrieve the form fields in the order that they where submitted I'd say blaming zope for not reading the docs is somewhat arrogant .-) I have been reading the docs for thee

Re: [Zope] REQUEST.form variables order

2006-04-20 Thread Tino Wildenhain
Gaute Amundsen schrieb: ... The order of the form elements that goes into mail headers is ofcourse irelevant. I'ts the rest of the form, you know name, adress, street, etc. that are the problem. It's a purely visual thing, but when you have a form with perhaps 50 fields, that the client has

Re: [Zope] REQUEST.form variables order

2006-04-20 Thread Tino Wildenhain
') if request.form.has_key(e)] which gives you the form elements in a nice list with their respective values. Advantage: this makes it impossible for an attacker to just supply more/other form fields then originally were in the form. Regards Tino Wildenhain

Re: [Zope] Regular Expressions

2006-04-20 Thread Tino Wildenhain
/Yourproduct/__init__.py and edit it accordingly. Restart zope and use the modules you want. Make sure you enable only modules you really can trust. Regards Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope

Re: [Zope] REQUEST.form variables order

2006-04-19 Thread Tino Wildenhain
Gaute Amundsen wrote: I want to retrieve the form fields in the order that they where submitted in the http POST. I know this has been brought up before, and that the answer is You cant. http://mail.zope.org/pipermail/zope/2005-October/162460.html For zope to refuse to expose this

Re: [Zope] what process does Zope run as?

2006-04-17 Thread Tino Wildenhain
Lars Hohmuth wrote: What process does Zope run as in Windows XP? I finally tracked down the 10053 errors in Plone’s MailHost down to port blocking in one of McAfee’s virus scanners. But neither enabling port 25 for python.exe, java.exe, or pythonservice.exe seems to work. Getting rid of the

Re: [Zope] Zope + Apache + mod_proxy + SiteRoot = some links not proxied?

2006-04-10 Thread Tino Wildenhain
is the host:port zope listens. HTH Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http

Re: [Zope] pass variables in a form

2006-04-03 Thread Tino Wildenhain
Dean Hale schrieb: Hi, I hope this is the correct forum to add this query, and any help appreciated. I have the following zpt which pulls in the users userid - $uid and some text generated from a python script (myEV - $pass). It works fine however i need to pass the variables along in a

Re: [Zope] External Methods

2006-04-03 Thread Tino Wildenhain
Dennis Allison wrote: Too many and too hard to remember where they are. I have writen a FindAndApply external method that uses reloadIfChanged(). Well if too many, why not go to full external products? Regards Tino ___ Zope maillist -

Re: [Zope] reading cookies from external methods

2006-03-31 Thread Tino Wildenhain
Jed Parsons wrote: Oh, cool. That's kind of magical. :) It looks like I can't get the RESPONSE that way, so if I want to do a RESPONSE.setCookie(...) somewhere, I have to pass REQUEST and RESPONSE as before, yes? No, RESPONSE is a subobject of REQUEST - see python scripts as an example

Re: [Zope] Zope and Tomcat troubles

2006-03-31 Thread Tino Wildenhain
Mads Munch Hansen wrote: Hi, Since I installed Zope on my server Tomcat has stoped working, and I was wondering if any of you knew of a solution. When I try to load the management interface for TomCat, all I get is a blank page, the same when I try to log into OpenXchange... I installed zope

Re: [Zope] Re: Question about Zope and security

2006-03-30 Thread Tino Wildenhain
Chris Withers schrieb: ... what way? http basic auth is a standard. cookie auth isn't, and it's always insecure no matter how you implement it they are both equally insecure - while you can make the cookie (as session auth) a little more secure - but after all its worth nothing as long as you

Re: [Zope] Re: Question about Zope and security

2006-03-30 Thread Tino Wildenhain
Chris Withers schrieb: Tino Wildenhain wrote: Cyrille Bonnet wrote: Hi Terry, ... Sorry, I wasn't even aware that Zope stores the passwords in plain text. My primary concern (for the moment) is passwords in plain text in the request. No it does not. The default userfolder stores

Re: [Zope] Question about Zope and security

2006-03-29 Thread Tino Wildenhain
Cyrille Bonnet wrote: Hi there, I have been telling all my clients about how great Zope is for security: fine-grained permissions, security framework, roles, etc. Now, one of my clients has a security expert who took a close look at how Zope authenticates users. The results were not good.

Re: [Zope] Re: Question about Zope and security

2006-03-29 Thread Tino Wildenhain
Cyrille Bonnet wrote: Hi Terry, ... Sorry, I wasn't even aware that Zope stores the passwords in plain text. My primary concern (for the moment) is passwords in plain text in the request. No it does not. The default userfolder stores passwords hashed. Regards Tino

Re: [Zope-dev] Re: Wishlist Item

2006-03-26 Thread Tino Wildenhain
Chris Withers wrote: Andreas Jung wrote: CMF or not - if one need such a functionality one can download CMF or a related product. If such functionality should belong into the core than it should be implemented in a reusable way and frameworks like CMF should be build on top of it. So -1 for

Re: [Zope] Re: CSS Best practises

2006-03-24 Thread Tino Wildenhain
Tonico Strasser schrieb: Tino Wildenhain schrieb: ... flexibility w/o slow and error prone full dynamic stylesheets. Plain text/css files are slow too if you don't cache 'em. But you can, thats the whole point. Regards Tino ___ Zope maillist

Re: [Zope] best practice, CSS Stylesheets

2006-03-21 Thread Tino Wildenhain
Peter Bengtsson schrieb: John Huttley wrote: Hi, What is the best way of handling CSS? I've looked at ZStylesheets, but it is buggy and uses depreciated functions that will not be available in 2.10. I recommend a DTML Document as an upgrade to File objects. If you use DTML you can a)

Re: Give it a rest + answers. (Re: [Zope] Re: Zope + Apache on Quad Debian machine)

2006-03-21 Thread Tino Wildenhain
Dario Lopez-Kästen schrieb: ... The fact that the issue of the GIL is not more prominent in the Zope worlds, I think is because relatively few zopistas are aware that there is a problem; mostly, because not so many run multicpu-boxes in production, and also because of attitude, I suppose:

Re: [Zope] best practice, CSS Stylesheets

2006-03-21 Thread Tino Wildenhain
David Pratt schrieb: Anyone have any idea whether dynamic css via dtml will remain possible as CMF gets more Z3'ish? Or will only possibility be overrides in css itself. What do you expect to change with Z3? Otoh, not using runtime-generated CSS is usually a better approach anyway. Regards

Re: [Zope] Newbie zopectl question

2006-03-20 Thread Tino Wildenhain
JulianRead schrieb: Hi I have created a zope / plone site which i have deployed on a dedicated server using linux with fedora core 3. I have installed zope as root as setup an instance of zope using a different user. I am trying to setup zope so that it will start automatically when the

Re: [Zope-dev] New mailing list: [EMAIL PROTECTED] for all checkin messages

2006-03-18 Thread Tino Wildenhain
Jim Fulton schrieb: I've set up a new mailing list that gets all checkins for the zope.org CVS and Subversion repositories: http://mail.zope.org/mailman/listinfo/checkins Note to contributors: Only members can send messages to this list. This means that you will get messages for a

Re: [Zope] Sample Zope Page Templates

2006-03-18 Thread Tino Wildenhain
John Poltorak schrieb: Is there such a thing as a repository of sample Zope Page Templates? I don't mean sample code snippets but ZPT's that people use in real websites. What are you after? (X)HTML-Design? PTs arent rocket science. And in the event they are, the author should rethink his

Re: [Zope] Re: Zope + Apache on Quad Debian machine

2006-03-15 Thread Tino Wildenhain
Hugo Ramos schrieb: Has any1 tried this before? Can you point me to some documentation? What's your experience? is it true that not doing this the 4 cpu's will not be 100% used? I think these questions are very ZOPE RELATED since I asked them in a Zope mailing list don't you think? I'm

Re: [Zope-dev] Re: http access to svn repos?

2006-03-08 Thread Tino Wildenhain
Mark Hammond schrieb: Chris quoting Jim: ... I would support HTTP anonymous checkouts. I'm really against writable HTTP checkouts because I consider the credentials mechanism for HTTP access to be extremely lame. whether SVN or not, I'm guessing any use of HTTP basic authentication

Re: [Zope] DTML-In with filter

2006-03-08 Thread Tino Wildenhain
Martin Koekenberg schrieb: Hello, Is it possible to use a DTML-In to display all DTML Documents in a folder exept the one's with a centain value in a property ? Example. DTML Document one with property a=bc DTML Document two with property a=de DTML Document three with property a=bc Now

Re: [Zope-dev] Re: http access to svn repos?

2006-03-06 Thread Tino Wildenhain
Tres Seaver schrieb: Chris Withers wrote: ... Where should I write the proposal? Who is going to review it? http://www.zope.org/Wikis/DevSite/Proposals ; post here and zope3-dev for review. +1 for http anon checkouts at least :-) ... -1 on using https for writable checkouts. The

Re: [Zope] Zed should stand for Zope Extension Distribution

2006-03-02 Thread Tino Wildenhain
Mark, Jonathan (Integic) schrieb: Over at the Zope-Dev mailing list, Jim Fulton (the inventor of Zope) is talking about a new line of software called Zed. It would consist of those parts of Zope 3 which can be called independently of the Zope/twisted server. please be carefull on inventing of

Re: [Zope-PAS] project questions

2006-03-01 Thread Tino Wildenhain
Jens Vagelpohl schrieb: Zac has asked to step back a bit as the contact for the project and I told him I could take over that part. That includes things like release stewardship. One of the items that had been on my list for a while was to move both the download area as well as the

Re: [Zope] External Methods newbie question

2006-03-01 Thread Tino Wildenhain
Alric Aneron schrieb: Hello, I see I can only execute python functions in external methods. Is there any way to execute the whole file, not just a certain function? In linux I created a python script, and it doesn't have functions. I just want to execute the whole file. I tried using self

[Zope] Re: [ZODB-Dev] how to let java applet using mysql database work in zope/plone?

2006-02-26 Thread Tino Wildenhain
LonLon schrieb: Thanks for your suggestion jens, but my java applet is working outside zope, it has no problem with mySQL database. Only when I integrate my applet into zope, it can not take mySQL data anymore. That's why I request suggestions here. I am still hoping somebody knows how to fix

Re: [Zope] Storing things in the session from ZPT

2006-02-24 Thread Tino Wildenhain
Robert (Jamie) Munro schrieb: How can I put something in a session from ZPT? I've tried: div tal:define=session/foo request/foo div tal:define=foo python:session['foo']=request['foo'] Do I really have to write a python method just to assign a single value? No you can use the method for all

Re: [Zope] image processing site quidance...

2006-02-20 Thread Tino Wildenhain
Nicolas Georgakopoulos schrieb: Hello Zopistas, I need a little guidance for a site that must make image processing on the fly. Users should be able to upload image files and after some pixels manipulation they should see the image preview after the changes and download it. You should be

Re: [Zope] Zope 2.9 and SSL

2006-02-17 Thread Tino Wildenhain
Ron Bickers schrieb: On Fri February 17 2006 05:19, Martijn Pieters wrote: ... Ok. I thought it was reporting Apache for me before, but I don't recall for sure. Does using mod_rewrite with [P] report the same? Yes, and its working internally identically :-) Apache as frontend proxy

Re: [Zope] Granting access by reading http headers (Consulting opportunity)

2006-02-17 Thread Tino Wildenhain
Marc Schnapp schrieb: If anyone here has the consulting expertise to help implement a solution, please email me separately at m + schnapp + service + marc + dot + com. Its much easier as you might think. You dont even change Zope for this if you are using apache as front end proxy via usual

Re: [Zope] Method to return the properties of an object

2006-02-10 Thread Tino Wildenhain
Jonathan schrieb: You can create a small utility external method to call dir() and type() - very useful! There are easier ways to shot yourself in the foot :-) ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No

Re: [Zope] Method to return the properties of an object

2006-02-10 Thread Tino Wildenhain
Jonathan schrieb: How would you shoot yourself? dont you think these methods arent accessible from ZMI code by purpose? :-) Btw, for Properties and their types there are already API methods. So no need to put holes into your site security. Regards Tino

Re: [Zope] Method to return the properties of an object

2006-02-10 Thread Tino Wildenhain
Jonathan schrieb: The idea of using an external method for dir/type is simply to allow a developer to quickly investigate attributes/methods of objects - if you are silly enough to actually incorporate this mechanism into 'production' code then you should shoot yourself. And how did you

Re: [Zope] about zope and mouse event handling

2006-02-10 Thread Tino Wildenhain
Allen Huang schrieb: I want to make a web page that could handle mouse events. My primary goal is to do some image processing like zooming and panning on an image displayed and redisplay it on the same page. But I don't really know how to approach this and at the same time interacting with Zope

Re: [Zope] about zope and mouse event handling

2006-02-10 Thread Tino Wildenhain
Floyd May schrieb: On 2/10/06, Tino Wildenhain [EMAIL PROTECTED] wrote: ... maybe if there is a chapter about image manipulation on the fly with PIL (python imaging lib) I believe that Plone (or Plohn as it seems to be called by Zope people ;-) ) has some product(s) somewhere that make

Re: [Zope] Re: htaccess with zope/plone ?

2006-02-09 Thread Tino Wildenhain
michael nt milne schrieb: glad you've taken that on board :-) Over and out from me on this one as well. By the way using the location/location directive is the way to password protect using Apache on non directory based virtual hosts. It works using the URL line rather than directory access.

Re: [Zope] major problems placing authentication on an extranet site-security flaw?

2006-02-08 Thread Tino Wildenhain
michael nt milne schrieb: Thanks for the advice. I'll have another look at the security settings but this is undoubtedly an issue. The superuser password not working is the main one etc. But ultimately my comments on usabiltity should be taken on board because Zope security is overly

Re: [Zope] major problems placing authentication on an extranet site-security flaw?

2006-02-08 Thread Tino Wildenhain
a broken useragent (e.g. Internetexplorer) with horrible cache settings and did view the authenticated page before. Regards Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding

Re: [Zope] major problems placing authentication on an extranet site-security flaw?

2006-02-08 Thread Tino Wildenhain
michael nt milne schrieb: Sorry but this is not my experience and I have experimented. Am using gmail basic setting which I like. Be sure mailinglist people dont like it :-) Actually it should not bee too hard to 1) create a role, lets call it Guests (in / ) 2) create a user: guest (in

Re: [Zope] major problems placing authentication on an extranet site-security flaw?

2006-02-08 Thread Tino Wildenhain
Mark Barratt schrieb: michael nt milne wrote: ... My other advice is to try not to touch ZMI security screens: if you're using Plone you should try to set up the security you need in Plone as Ah yes, things are a bit different when plone comes in. Then Plone documentation should be

Re: [Zope] How to get $PRODUCT_HOME

2006-02-07 Thread Tino Wildenhain
Roman Klesel schrieb: Hello again, I just started with FS products and have trouble to figure some things out ... From within zope I would like to call scripts that I provide in the product folder on the file system like eg.: handle = os.popen('gnuplot %s/bin/loadgraphs.gplt' %

Re: [Zope] Multiple SUBMIT images on one form

2006-02-06 Thread Tino Wildenhain
Richard Smith schrieb: I gather that the problem whereby having more than one IMG submit on a single form causes some browsers (IE but not firefox) problems is well known. The problem is solved by using the positional attributes x,y in a cgi script. Pardon, but how do the x,y coordinates

Re: [Zope-dev] Re: traversable methods / docstrings.

2006-01-30 Thread Tino Wildenhain
Lennart Regebro schrieb: If somebody gets time to do the suggested refactoring of the publisher for 2.10, then the docstring requirement could be dropped for IFiveTraversable objects, I think. Otoh, whats wrong with docstrings anyway? :-) Regards Tino

Re: [Zope] Product refreshing in Zope 2.9

2006-01-30 Thread Tino Wildenhain
Peter Bengtsson schrieb: Suppose my code looks like this:: class MyProduct(Folder): blablabla print class MyProduct has just been reloaded Then I start zope with ./bin/runzopt, debug-mode off, make a change in the product and press the Refresh button in the Control_Panel and notice

Re: [Zope] Zope 2.8.x and python security audit

2006-01-27 Thread Tino Wildenhain
Sven Deichmann schrieb: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Oh well... no news is not always good news. I could also mean that PHP is much more popular and under more surveillance while python is only good known to professional crackers... The problem is, that in this usecase we

Re: [Zope] SSL over Multiple Zope/Plone sites?

2006-01-25 Thread Tino Wildenhain
Jeff Donsbach schrieb: On 1/24/06, michael nt milne [EMAIL PROTECTED] wrote: Ok, thanks. The annoying thing is that I am renting a virtual dedicated server which allows multiple domain names obviously but not multiple IP addresses. Or it probably costs more for that. Do you reckon SSL will

Re: [Zope] Zope/Plone logon security strategy etc

2006-01-25 Thread Tino Wildenhain
think it should work instead and what are the improvements you see as well as the drawbacks? Regards Tino Wildenhain ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists

Re: [Zope] XML-RPC encrypted?

2006-01-25 Thread Tino Wildenhain
Peter Bengtsson schrieb: Have you tried https://user:[EMAIL PROTECTED]:port\folder\method.. ? On 1/25/06, José Carlos Senciales [EMAIL PROTECTED] wrote: Hello, I need to use XML-RPC to call some functions of a product in zope, but all my xml-rpc conections has user:[EMAIL

Re: [Zope] Re: Zope/Plone logon security strategy etc

2006-01-25 Thread Tino Wildenhain
michael nt milne schrieb: Cookie authentication can't be secure. Also I have my doubts about http authentication. I'll check though. Basicallx you want really good encryption on any logon and password etc. You want ssl for all. There is no security if you have logon encrypted in a stateless

Re: [Zope] dealing with scripts that take too long

2006-01-25 Thread Tino Wildenhain
martin f krafft schrieb: Hi there, ... I was thinking we could send data back to the browser, but I cannot figure out a way to do this from a TTW Python script. How can I send data immediately, not only when I 'return printed' after all the processing is done. NPH or so, I believe this was

[Zope] Re: Zope/Plone logon security strategy etc

2006-01-25 Thread Tino Wildenhain
michael nt milne schrieb: Yes I agree, having checked on basic http authentication I need SSL. Basic http and cookie auth is insecure. I just feel that zope should have this facility even with a self signed certificate, so that you could do it without Apache and had more options. The option to

<    1   2   3   4   5   6   >