Re: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

2007-01-31 Thread Chris Withers
Mark, Jonathan (Integic) wrote: LESSON #1: If it looks as if a product is no longer maintained then ask the maintainer of the product if he has any uncommitted changes in his version control system. They're not uncommitted, they're in a public subversion repository thats' advertised on the

RE: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

2007-01-30 Thread Mark, Jonathan (Integic)
I wish to thank Chris for his helpful comments. I accept them in the playful spirit in which they were offered. This sort of feedback is essential to people who are learning. LESSON #1: If it looks as if a product is no longer maintained then ask the maintainer of the product if he has any unco

Re: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

2007-01-30 Thread Chris Withers
Mark, Jonathan (Integic) wrote: I don't know Zope well, No offence, but that much is apparent ;-) excellent Squishdot product for three years at Goodbyejim.com. Chris has moved on to other Zope activities and has not upgraded Squishdot since 2001. I still use Squishdot heavilly. I committed

RE: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

2007-01-29 Thread Mark, Jonathan (Integic)
"""Excuse me for saying, but this is all slightly nuts. Is there some reason you're being so (overly) paranoid? Chris""" I don't know Zope well, even though I have been using Chris's excellent Squishdot product for three years at Goodbyejim.com. Chris has moved on to other Zope activities and h

Re: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

2007-01-29 Thread Chris Withers
Mark, Jonathan (Integic) wrote: I will add the URL test. In addition, I will pass a long symettric 64 bit key to the external method as a parameter, and require the external method to confirm that the correct key was passed. Since only I have access to my file system and to my ZMI this is suff

Re: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

2007-01-29 Thread Chris Withers
Mark, Jonathan (Integic) wrote: Using a proxy role on the calling Python Script worked. My guess is that a clever hacker could call the Python Script continually and then create a race condition that would permit him to call the External Method Why would calling a python script continuously s

Re: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

2007-01-29 Thread Chris Withers
Jonathan wrote: if string.find(self.REQUEST['ACTUAL_URL'], 'ExtMethodName') != -1: return self.REQUEST.RESPONSE.redirect('BadUserURL') This is a pretty weak and silly way of going about this... Chris -- Simplistix - Content Management, Zope & Python Consulting - htt

RE: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

2007-01-26 Thread Mark, Jonathan (Integic)
wo shekels. -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED] Sent: Friday, January 26, 2007 2:30 PM To: Mark, Jonathan (Integic); zope@zope.org Subject: Re: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope? - Original Message - F

Re: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

2007-01-26 Thread Jonathan
- Original Message - From: "Mark, Jonathan (Integic)" <[EMAIL PROTECTED]> To: "Jonathan" <[EMAIL PROTECTED]>; Sent: Friday, January 26, 2007 2:32 PM Subject: RE: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zo

RE: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

2007-01-26 Thread Mark, Jonathan (Integic)
the web in Zope? - Original Message - From: "Mark, Jonathan (Integic)" <[EMAIL PROTECTED]> To: "Andreas Jung" <[EMAIL PROTECTED]>; Sent: Friday, January 26, 2007 2:06 PM Subject: RE: [Zope] Is there any way to turn off the publishing of externalmet

Re: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

2007-01-26 Thread Jonathan
- Original Message - From: "Mark, Jonathan (Integic)" <[EMAIL PROTECTED]> To: "Andreas Jung" <[EMAIL PROTECTED]>; Sent: Friday, January 26, 2007 2:06 PM Subject: RE: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Z

Re: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope?

2007-01-26 Thread Jonathan
- Original Message - From: "Mark, Jonathan (Integic)" <[EMAIL PROTECTED]> To: Sent: Friday, January 26, 2007 10:29 AM Subject: [Zope] Is there any way to turn off the publishing of externalmethods to the web in Zope? I have an external method which uses eval(). I would like to prev