[Zope] Pword reset tools

2013-06-03 Thread Richard Harley
It looks like there are no pa55word reset products for straight Zope that are 
still maintained i.e. a feature to allow users to reset their own pa55words via 
email linking into aclusers.

If that is correct does anybody have any pointers for implementing such a 
mechanism with a one time email reset tool?

TIA


(Re-posted to remove administrivia keywords!)
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Thread Number

2013-05-22 Thread Richard Harley
Is there anything important to consider when increasing the thread count above 
7 as outlined here in 24.4.2/3: 
http://docs.zope.org/zope2/zope2book/MaintainingZope.html

I have tried to 10 but encounter problems with number of open file descriptions 
on Centos 6.
Cheers
Rich___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Thread Number

2013-05-22 Thread Richard Harley
Noted, thanks


On 22 May 2013, at 08:42, Andreas Jung li...@zopyx.com wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Reducing the number of threads (down to 1) and having multiple
 app-servers is usually the way to go instead of increasing the number
 of threads.
 
 - -aj
 
 Richard Harley wrote:
 Is there anything important to consider when increasing the thread
 count above 7 as outlined here in 24.4.2/3:
 http://docs.zope.org/zope2/zope2book/MaintainingZope.html
 
 I have tried to 10 but encounter problems with number of open file 
 descriptions on Centos 6. Cheers Rich
 
 ___ Zope maillist  -
 Zope@zope.org https://mail.zope.org/mailman/listinfo/zope **   No
 cross posts or HTML encoding!  ** (Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce 
 https://mail.zope.org/mailman/listinfo/zope-dev )
 
 - -- 
 ZOPYX Limited | Python | Zope | Plone | MongoDB
 Hundskapfklinge 33| Consulting  Development
 D-72074 Tübingen  | Electronic Publishing Solutions
 www.zopyx.com | Scalable Web Solutions
 - --
 Produce  Publish - www.produce-and-publish.com
 
 
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.11 (Darwin)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
 
 iQGUBAEBAgAGBQJRnHbTAAoJEADcfz7u4AZjYiMLwKqN+eE8J94ljCgiqcI3Jl8J
 lO5G7tUenBjSq+odE4uZgPgT+P/n8qeajiU1capmcCIc0c9CidGImRHwFODp6ehf
 gZ8Vey1zHFhSrsQumix//zgYVf57NRHFzXqjRy2brGZ/sILN5SorVcssLKN8bUAa
 xNvx33yuTJyRBhfwZjki85JJcP6LGdRZkXihZq8qV/G0i14X25L9ZX2oT8ciucOr
 YALM0780KdL/0rtfvsiQ1lGB8QUU8iiQrfl44t5mCS6pDxobR4XGWb5esJ9rZniW
 8bqCqp2KxHOYDJ0yu6EYdWUuZ+9zktcGXVt9mk3ZJ9Gn7Bhkt70fLooCUyWiS9i2
 XaSGpCo96GxR6NtF5bLRgHHnl56OgnlR/zlun0bmbx4H8vRZ7OpZjONvrSEKInu+
 4siJ0X2648doBZwbAHAh3Mw79WNwAXEcnNTbm8JRE4agPcmovKa/LMAm+EjX5i0O
 lEccQXg7bvwjkg3Gm0LuEdUbKP/guZg=
 =UYQs
 -END PGP SIGNATURE-
 lists.vcf

___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Zope and security vulnerability: 20121106

2012-11-12 Thread Richard Harley

So, to clarify, does this affect plain Zope 2.10, no Plone?

Rich
On 12/11/12 12:02, johannes raggam wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

The affected versions go back a long time. I don't know it exactly,
but people have used it successfully with Plone 2.1 (from ancient
times) and I have patched Zope 2.8 instances too.


On 11/11/2012 09:43 PM, Allen Schmidt wrote:

For which zope versions?

On Nov 11, 2012 2:16 PM, johannes raggamraggam...@adm.at
mailto:raggam...@adm.at  wrote:

You can just apply the Plone hotfix for Zope only installations.
The Plone patches are not applied then.

Johannes

On 11/11/2012 06:32 PM, Marcus Schopen wrote:

Hi,
is a standard Zope affected by this security vulnerability or
only if Plone is installed:


http://plone.org/products/plone/security/advisories/20121106-announcement



The patch is replacing some basic classes therefore it looks to
me that Zope itself without any Plone is vulnerable too. If so
is there a Hotfix for Zope or new Zope version which fixes these
bugs?
Ciao Marcus



___ Zope maillist  -
Zope@zope.orgmailto:Zope@zope.org

https://mail.zope.org/mailman/listinfo/zope **   No

cross posts or HTML encoding!  ** (Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )



___ Zope maillist  -
Zope@zope.orgmailto:Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope **   No cross posts or
HTML encoding!  ** (Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )

- -- 
programmatic  web development

di(fh) johannes raggam / thet
python plone zope development
mail: off...@programmatic.pro
web:  http://programmatic.pro
   http://bluedynamics.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iEYEARECAAYFAlCg5WkACgkQW4mNMQxDgAfsyACgvbuoNO8ocpordzJmbH3X0OA2
gCsAnAkFNozMy1TRGWTKQjaYQgzLIisM
=DpGn
-END PGP SIGNATURE-
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
  https://mail.zope.org/mailman/listinfo/zope-announce
  https://mail.zope.org/mailman/listinfo/zope-dev )
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Python scripts

2012-07-06 Thread Richard Harley

Hi

On Zope 2.10 is there a simple/universal way to only allow python 
scripts to be called by DTML methods or other python scripts and not 
directly TTW?

Thanks
Rich
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Python scripts

2012-07-06 Thread Richard Harley
That works great, thanks. So there is no way to do this across, say, a 
folder with hundreds of scripts in without duplicating the code in each 
individually?



On 06/07/12 13:30, Laurence Rowe wrote:

On 6 July 2012 14:09, Richard Harleyrich...@scholarpack.com  wrote:

On Zope 2.10 is there a simple/universal way to only allow python scripts to
be called by DTML methods or other python scripts and not directly TTW?

You can check that the script is not the published object with:

 if container.REQUEST['PUBLISHED'] is script:
 raise 'Forbidden'

For newer versions of Zope raise an exception object:

 from zExceptions import Forbidden
 if container.REQUEST['PUBLISHED'] is script:
 raise Forbidden('Script may not be published.')

Laurence
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] CookieCrumbler, any new versions or replacement?

2012-02-02 Thread Richard Harley
What is the main advantage of PAS over cookie crumbler over SSL out of interest?
Cheers
Rich


On 2 Feb 2012, at 21:57, Shane Hathaway sh...@hathawaymix.org wrote:

 On 02/02/2012 10:46 AM, Hugo Ramos wrote:
 I need to reuse a web application I developed around 2005/2006. This
 App was using CookieCrumbler as it's only authentication method but it
 seems that after zope 2.11.x the product is broken as it has a few
 imports from deprecated classes.
 
 Anyone knows about CookieCrumbler versions above 1.2 or some other
 replacement for this product?
 
 Zope's pluggable authentication service replaces it.
 
 Shane
 ___
 Zope maillist  -  Zope@zope.org
 https://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Python Script Security

2011-11-18 Thread Richard Harley
Hello all

I have a dtml method which builds a page from various different python 
scripts.
How can I stop the python scripts from being called and passed variables 
independently of the main dtml method? I've tried some research on proxy 
roles but couldn't pin it down.  ZSQL methods are not callable 
independently and I would like Python Scripts to behave the same.
TIA
Rich
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] zopetime behaviour

2011-09-20 Thread Richard Harley

Hi all

I hope I'm not missing something obvious here. ZopeTime is gaining two 
hours when it's string formatted.

*
thistime = context.ZopeTime().strftime(%Y/%m/%d %H:%M:%S)
print ZopeTime:
print context.ZopeTime()

print String formatted ZopeTime:
print thistime
*

The output is this:*

*ZopeTime: 2011/09/20 10:16:12.628 GMT+1

String formatted ZopeTime: 2011/09/20 12:16:12

How come string formatted ZopeTime gains two hours?

Cheers
Rich
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] is it possible to upgrade from 2.9 to 2.13?

2011-07-04 Thread Richard Harley
Does anyone have any further information on this bug in 2.10 regarding 
ZSQL methods? Would an upgrade from 2.9 to 2.10+ in an app using lots of 
zsql methods cause unforseen issues?


On 04/07/11 09:46, Stefan Loidl wrote:
 Hi Fernando,

 the option 'enable-product-installation' in zope.conf has to be set to
 on to enable product registration of old products in the Products
 directory.

 Regards,
 Stefan

 Am 03.07.2011 18:44, schrieb Fernando Martins:
 On 07/03/2011 09:30 AM, Fernando Martins wrote:
 merely dropping Products in the site-packages does not add a product.

 Browsing through the list I saw this post:

 https://mail.zope.org/pipermail/zope/2011-June/176165.html

 with reference to a directive in zope.conf:

 products /usr/local/Products.CMFCore-2.2.4/

 I tried it with the package Products.ZSQLMethods here:

 http://pypi.python.org/pypi/Products.ZSQLMethods

 but no product is added and I see no error messages.

 The README.txt is not helpful and I found nothing useful in zope docs.
 In despair, I tried python setup.py build/install and all I got is a lot
 of zope packages being downloaded and dumped into the python install.

 Could someone be so kind to tell me the procedure to install Products
 from pypi?

 Is it possible to do it also with old products not in pypi?

 Also, what is the difference between zope.xxx and Products.xxx packages?

 Regards,
 Fernando
 ___
 Zope maillist  -  Zope@zope.org
 https://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )


-- 
Rich Harley
Director (Development)
(0044) 01754 871243 | http://www.scholarpack.com


___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] AUTHENTICATED_USER

2011-05-13 Thread Richard Harley
Please could someone tell me why AUTHENTICATED_USER was deprecated in 
favour of the python security module? A quick google says because it 
can be replaced..but this isn't really a good in depth explanation? If 
a request was manipulated to include another AUTHENTICATED_USER, 
wouldn't Zope just error out anyway?

Cheers
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Zope Dates

2011-05-03 Thread Richard Harley
Hello all

Hoping there is a quick fix for this - I'm trying to change how Zope 
formats dates. I want dd/mm/ but Zope is forcing -mm-dd. I've 
changed the format in zope.conf to 'international' but this makes no 
difference. I know dates can be formatted at the front end (i.e. fmt=) 
but it would be really useful to have Zope sort this out for me without 
having to do any string formatting. Any ideas?

Thanks
Richard

___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Zope Dates

2011-05-03 Thread Richard Harley
Thanks Andreas - so there is no way to set a date format at an 
intermediate layer so that all dates are rendered a certain way without 
string formatting? Am I naive in thinking this could possibly be done at 
the db adapter level?

Thanks




On 03/05/11 12:26, Andreas Jung wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

'international' only affects the format for parsing dates as far as I
can recall. Using strftime() gives you full control over the output
format. Your application should not rely on the default format. If you
need a custom date output format then define it explicitly in your
application.

- -aj

Richard Harley wrote:

Hello all

Hoping there is a quick fix for this - I'm trying to change how Zope
formats dates. I want dd/mm/ but Zope is forcing -mm-dd. I've
changed the format in zope.conf to 'international' but this makes no
difference. I know dates can be formatted at the front end (i.e. fmt=)
but it would be really useful to have Zope sort this out for me without
having to do any string formatting. Any ideas?

Thanks
Richard

___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
  https://mail.zope.org/mailman/listinfo/zope-announce
  https://mail.zope.org/mailman/listinfo/zope-dev )


- -- 
ZOPYX Limited   | zopyx group

Charlottenstr. 37/1 | The full-service network for Zope  Plone
D-72070 Tübingen| Produce  Publish
www.zopyx.com   | www.produce-and-publish.com
- 
E-Publishing, Python, Zope  Plone development, Consulting


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQGUBAEBAgAGBQJNv+ZLAAoJEADcfz7u4AZjUBkLwKy594OzaZMRAMDZGL3nL9g0
H+jFAsQHWsEy/3UbKzo//Ogh9TgQHrEaFOAEk36/lS0iWjQ0kq7bWzreFWkzApb2
fVOWHoVwtIIcgItlxEl0zgu/XGA/rw+1cIK1yxEy45H2BHHhXP8B1CVRUpwatlrR
lIDN3KXo0vem8tOa/DGcUISbW4VFpQU63qNOKfW4+hU/HJcoFeFs+jqSWro8F2+Q
hghoSTSM5GtX9h0hksBNJaVK+0wcD59R2fQZ28QdCz+cuiTe97cG+MW9Wd+GDeq6
6bgi915KgrsSfwSZ+lGYr/FssPSiFtZk11xDJsvF0XKSw8JnxjmDvWIaT/gexVDC
iPYF9cNJXAsEXlvUZVxhr81BH9/HE/KAOh/hmDC3eg6FqqubmtjQRUp3mnvXnGwZ
LWjDm//FBv7BOtr7ftwiLPhpFPZTRh3kzANsLHkIb1o4rjeOo3L8pcQeBzQLRM8b
24b1CQOZvjBfMYgWj3yKYHggYllw1go=
=pvLD
-END PGP SIGNATURE-



--

*Richard Harley*
ScholarPack

Follow us on Twitter http://twitter.com/spschools

Tel: 01754 871243

___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Forum

2011-01-06 Thread Richard Harley
Hello all

Are there any current forums which integrate into Zope nicely? I have 
tried Zforum and Squishdot in the past but I don't think either of these 
two have been updated in quite a while?

Thanks
Rich
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Forum

2011-01-06 Thread Richard Harley
Ah, ok , thanks - worth a shot :)

On 06/01/11 13:12, Andreas Jung wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Richard Harley wrote:
 Hello all

 Are there any current forums which integrate into Zope nicely? I have
 tried Zforum and Squishdot in the past but I don't think either of these
 two have been updated in quite a while?

 There is no reasonable forum solution for plain Zope 2.

 - -aj
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.11 (Darwin)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

 iQGUBAEBAgAGBQJNJb/GAAoJEADcfz7u4AZjwdQLv2ZU03N7MJvtOSPXP+A9ir61
 s+n2NnvkXOKBXzOv5tq/qxGcMvGkgt4SR8Xin/nT/KI4B7S1KAc/0gKIDdKX+yDu
 5QImZBM2et8w4hPeUX6Lv1RAGcL+PbWl25rFTR0ziqquriX90/xZf+v6HgMQixP8
 m3zox69iolsHaC7+tS3dYlNlETedS1k0KBbksC34MAcy/U2fHoIH/5YAzinfnkL1
 bv1n1kQYAJ3mkHkZ7YgVhppguPqe4vxQ/dkAAxkNOz2FHee0nEARgTljHv8BwsSj
 RgQLehpCWgAiN6rxzTuZJ3v44L08Gd9zdiPGlhpRpO/zp5ihmVVNUHk8C5zDPgTT
 jeGZx/iE3VQfY1IeZo5ylzz3L+lzQMpZe2vXAJiBwU8AjJkCfZPpnPOIw2zcGtAm
 7N1tKzig5RGK0u2YYSR86jYls2WabbAhoRmoFXClU7eKrt0rm+YjsZ0cQVdzDeEy
 Zf5MWmwbuantBdeQc6EqkidsbOWiqJE=
 =2gOP
 -END PGP SIGNATURE-

___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Question about Upgrading Zope and OS X Server

2010-12-09 Thread Richard Harley
I think earlier than Zope 2.12 python 2.4 is mandatory.. don't quote me 
on that :)

On 09/12/10 06:52, Dan Gaibel wrote:
 So OS X Server Snow Leopard comes with Python 2.6.1. Is there any
 reason to think that this Python version would cause problems with
 Zope 2.8.6? We have had nice stability with Python 2.3.5. Either way,
 is Zope 2.8.7 a significantly better choice than 2.8.6?


 On Dec 8, 2010, at 8:22 AM, Richard Harley wrote:


 Dan - we are using 64bit Zope 2.8.7 and python 2.4 with no problems
 for
 years now. It can do everything we want with regards to Python
 scripting, database connectivity etc.

 I can't think of any huge problems with staying on Zope 2.8.6/7 era. I
 have said before 2.10+ breaks lots of products that would take ages to
 hack about (especially for companies using Zope not individuals with
 time on their hands). I'm all for upgrading, bug fixing and
 refactoring
 normally, but the backwards compatibility with Zope makes it harder
 than
 it should be.

 Rich


 On 08/12/10 12:11, Peter Bengtsson wrote:
  
 We're running several perfectly working 2.8 Zopes. They've been
 very stable.
 Annoying that Ubuntu insists on making Python 2.4 hard to install but
 for some of the servers we've changed back to Debian.

 On 7 December 2010 16:58, Dan Gaibeld...@cornell.edu   wrote:


 Good advice here, thanks! Is it a big mistake to stay at Zope
 2.8.6? The server has been very stable for years, apparently. What
 are the downfalls of not upgrading all the way past 2.10?

 On Dec 7, 2010, at 2:40 PM, Andrew Milton wrote:


  
 +---[ Tres Seaver ]--
 | -BEGIN PGP SIGNED MESSAGE-
 | Hash: SHA1
 |
 | On 12/07/2010 01:18 PM, Dan Gaibel wrote:
 |
 |   I have recently inherited the responsibility of supporting a
 fairly
 |   complex web server running Zope 2.8.6 on Python 2.3.5. This
 |   configuration is currently on a Linux (Fedora Core) server
 and I
 |   would like very much to migrate to OS X Server Snow Leopard.
 It also
 |   seems to me that I should consider upgrading Zope to a more
 current
 |   release while I'm at it. We heavily use MySQL and associated
 |   products, LocalFS, and the Python Imagining Library. We have a
 |   variety of ZClass homegrown products as well.
 |
 |   I know that I'm in for a headache no matter what, but I
 wonder if any
 |   of you folks could point me in the right direction or offer
 advice on
 |   the situation. Is it crazy to jump from 2.8.6 to 2.12? Does
 anyone
 |   use OS X Server for Zope? Is this migration a mistake? Any
 pitfalls I
 |   should be looking out for?
 |
 | I would do this in small steps, e.g. first migrate to the new
 machine / OS:
 |
 | - - Get Python 2.3.x installed on the OS/X server.
 |
 | - - Build the latest Zope 2.8.* on that server.
 |
 | - - Install and test products there in the same versions  you
 now use.
 |
 | - - Copy your old database over and test.
 |
 | then upgrade the software stack:
 |
 | - - Move carefully through the Zope releases (I would to 2.9,
 2.10, and'
 |   2.12), upgrading Python as needed  to stay on a supported
 version.
 |
 | - - Check for upgrades to the products, and their compatibility
 with
 |   Zope versions.  Test them, and your site. after each upgrade.

 The move from 2.9 to 2.10 is likely to be the most painful part in
 terms of legacy Zope apps. A lot of products will break on 2.10

 --
 Andrew Milton
 a...@theinternet.com.au
 ___
 Zope maillist  -  Zope@zope.org
 https://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


 ___
 Zope maillist  -  Zope@zope.org
 https://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
   https://mail.zope.org/mailman/listinfo/zope-announce
   https://mail.zope.org/mailman/listinfo/zope-dev )


  



 ___
 Zope maillist  -  Zope@zope.org
 https://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )
  
 ___
 Zope maillist  -  Zope@zope.org
 https://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
   https://mail.zope.org/mailman/listinfo/zope-announce
   https://mail.zope.org/mailman/listinfo/zope-dev )


___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Question about Upgrading Zope and OS X Server

2010-12-08 Thread Richard Harley
Dan - we are using 64bit Zope 2.8.7 and python 2.4 with no problems for 
years now. It can do everything we want with regards to Python 
scripting, database connectivity etc.

I can't think of any huge problems with staying on Zope 2.8.6/7 era. I 
have said before 2.10+ breaks lots of products that would take ages to 
hack about (especially for companies using Zope not individuals with 
time on their hands). I'm all for upgrading, bug fixing and refactoring 
normally, but the backwards compatibility with Zope makes it harder than 
it should be.

Rich


On 08/12/10 12:11, Peter Bengtsson wrote:
 We're running several perfectly working 2.8 Zopes. They've been very stable.
 Annoying that Ubuntu insists on making Python 2.4 hard to install but
 for some of the servers we've changed back to Debian.

 On 7 December 2010 16:58, Dan Gaibeld...@cornell.edu  wrote:

 Good advice here, thanks! Is it a big mistake to stay at Zope 2.8.6? The 
 server has been very stable for years, apparently. What are the downfalls of 
 not upgrading all the way past 2.10?

 On Dec 7, 2010, at 2:40 PM, Andrew Milton wrote:

  
 +---[ Tres Seaver ]--
 | -BEGIN PGP SIGNED MESSAGE-
 | Hash: SHA1
 |
 | On 12/07/2010 01:18 PM, Dan Gaibel wrote:
 |
 |  I have recently inherited the responsibility of supporting a fairly
 |  complex web server running Zope 2.8.6 on Python 2.3.5. This
 |  configuration is currently on a Linux (Fedora Core) server and I
 |  would like very much to migrate to OS X Server Snow Leopard. It also
 |  seems to me that I should consider upgrading Zope to a more current
 |  release while I'm at it. We heavily use MySQL and associated
 |  products, LocalFS, and the Python Imagining Library. We have a
 |  variety of ZClass homegrown products as well.
 |
 |  I know that I'm in for a headache no matter what, but I wonder if any
 |  of you folks could point me in the right direction or offer advice on
 |  the situation. Is it crazy to jump from 2.8.6 to 2.12? Does anyone
 |  use OS X Server for Zope? Is this migration a mistake? Any pitfalls I
 |  should be looking out for?
 |
 | I would do this in small steps, e.g. first migrate to the new machine / 
 OS:
 |
 | - - Get Python 2.3.x installed on the OS/X server.
 |
 | - - Build the latest Zope 2.8.* on that server.
 |
 | - - Install and test products there in the same versions  you now use.
 |
 | - - Copy your old database over and test.
 |
 | then upgrade the software stack:
 |
 | - - Move carefully through the Zope releases (I would to 2.9, 2.10, and'
 |   2.12), upgrading Python as needed  to stay on a supported version.
 |
 | - - Check for upgrades to the products, and their compatibility with
 |   Zope versions.  Test them, and your site. after each upgrade.

 The move from 2.9 to 2.10 is likely to be the most painful part in
 terms of legacy Zope apps. A lot of products will break on 2.10

 --
 Andrew Milton
 a...@theinternet.com.au
 ___
 Zope maillist  -  Zope@zope.org
 https://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )

 ___
 Zope maillist  -  Zope@zope.org
 https://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
   https://mail.zope.org/mailman/listinfo/zope-announce
   https://mail.zope.org/mailman/listinfo/zope-dev )

  




___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] change permission of image

2010-11-19 Thread Richard Harley
Thanks Andreas

On 16/11/10 13:47, Andreas Jung wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Richard Harley wrote:

 Just want to find out how to change the permissions of a file/image
 using a python script and can't see this in the documentation. Any ideas?


  
 obj.manage_permission(permission, roles, acquire).

 Check the AccessControl API.

 - -aj
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.11 (Darwin)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

 iQGUBAEBAgAGBQJM4ot3AAoJEADcfz7u4AZjkmILwM+gL8BhahLdDTUYvPvl99YG
 gAunc2MhJxohTgz3Sk0BtrHAFHEYQqnfRBS0OMEQmZYKgJ0ysewKBX0CQ9yhwokL
 SyHMdROLN6+v2e1knE8hp/98ZM4uAZSP1piFEoZwVYlO8VgLruKfH0CcmxHY4QZn
 GJs/TC4kOf0MH2u0Aqc0LxgAh02cOksx7cZYJHAuccPNVviK2Uia3ie+6RM0gmtv
 KhZ9EQxEZ9Xr1y++BgifqI547Nvp63iHzXpJ/ckeUG9VHJFo8i+b1HVCe5DMKC1Q
 Sx1vSwuE0hqRvgs0whVNQkYIM4Dj7rK9+FlJmng01HNO/hvo8jAiWg/WQmBwtCqw
 L78ebuO3YDS/q/MRner0oFdh3CXUOCyCyvdB9UdkPVhicGr8/4ORxPqxZtBSKVjD
 S6ersmrn6I8UgiCCnQEz6sTDvwnHTzB+BB0kq2xFeTSHNK6EbU9FybxdkLyC
 Z+M7hYqMNvb2z4p8+JjGzaTd01YtWqY=
 =6EI9
 -END PGP SIGNATURE-


___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Zip Folder

2010-11-03 Thread Richard Harley
Hello all

I have been using Zope 2.9 - which works with the zip folder product. 
Now I upgraded to Zope 2.13 but the zip folder product does not work. Is 
there an equivalent, or another way of unzipping folders straight into 
the filesystem?

Thanks
Richard
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Zip Folder

2010-11-03 Thread Richard Harley

Here's the error log:

/2010-11-02T20:29:04 ERROR Application Couldn't install ZipFolder
Traceback (most recent call last):
  File 
/Zope2-2.13.0c1/zope/lib/python2.7/site-packages/Zope2-2.12.3-py2.7-linux-x86_64.egg/OFS/Application.py, 
line 646, in install_product

global_dict, global_dict, silly)
  File /home/Zope/Products/ZipFolder/__init__.py, line 1, in module
from ZipFolder import *
  File /home/Zope/Products/ZipFolder/ZipFolder.py, line 60
SyntaxError: Non-ASCII character '\xf6' in file 
/home/Zope/Products/ZipFolder/ZipFolder.py on line 61, but no encoding 
declared; see http://www.python.org/peps/pep-0263.html for details/


It is 9 years old now I think - but I haven't seen a substitute!

Richard


On 03/11/10 13:02, Andreas Jung wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Richard Harley wrote:
   

Hello all

I have been using Zope 2.9 - which works with the zip folder product.
Now I upgraded to Zope 2.13 but the zip folder product does not work.
 

Does not work means what exactly?

- -aj


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=VWvl
-END PGP SIGNATURE-
   


___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Zip Folder

2010-11-03 Thread Richard Harley
OK thanks, I'll have a look. I didn't want to waste time hacking around 
old products initially. I guess there's not much demand for this then, 
because it would have been done and released otherwise. I'm surprised 
it's not a staple part of a zope installation though.
Richard

On 03/11/10 14:12, Andreas Jung wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Richard Harley wrote:

 Here's the error log:

 /2010-11-02T20:29:04 ERROR Application Couldn't install ZipFolder
 Traceback (most recent call last):
File
 /Zope2-2.13.0c1/zope/lib/python2.7/site-packages/Zope2-2.12.3-py2.7-linux-x86_64.egg/OFS/Application.py,
 line 646, in install_product
  global_dict, global_dict, silly)
File /home/Zope/Products/ZipFolder/__init__.py, line 1, inmodule
  from ZipFolder import *
File /home/Zope/Products/ZipFolder/ZipFolder.py, line 60
 SyntaxError: Non-ASCII character '\xf6' in file
 /home/Zope/Products/ZipFolder/ZipFolder.py on line 61, but no encoding
 declared; see http://www.python.org/peps/pep-0263.html for details/

 It is 9 years old now I think - but I haven't seen a substitute!

  
 Well - read tracebacks can be helpful...first look at line 61 of the
 file and eventually fix it yourself (you see the URL for the particular
 reason).

 - -aj
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.11 (Darwin)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

 iQGUBAEBAgAGBQJM0W3BAAoJEADcfz7u4AZjgaELwM5ir7CE8IXwcIccUhW91KL1
 zXSekJz3EXIliXOBVL3+XfzEOdDZJ/H/h1Wivm293jbZcZDpZ/SfDeD1vUgBVNsX
 7i18e+cZRhs6wqFoKyBxFKtMFc1oMdWz/rXJe88ZOPNmzMZyNzDaaeO20kCwjvR2
 Ziqyd31mpe8zF5vZHFPw6fDhaBruH2pIqNbzR9xl/jKuVWdRNK/bmT2Ah5t3vQKe
 zPBcHU/2re/zcHYGxAkjTDBOmvXNP7fYt+wCFVDl6swWVUUVywYjFY4rkLQIrFTM
 Sga7STpPw50J2JK81G6aPeJCS6hZ/POBkPFLmJoj9es6B3B4YpxU69j2M/MZUAsk
 9GJSwOqta99PoD0uXaTJfWFT+0UQbn5Ia9hwJ057kyKtOAaSkjH4e7RhA7ItNSC1
 /Qc4ufy/fCN93+sjwQ5LqPHhWcRwMjTRCNeoc7XllD7n6ePGi+BCYEMHiQWPf6SX
 sV2KjvM6ZT7gHNrrSCVSDABo/VyCe28=
 =DxKD
 -END PGP SIGNATURE-


___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Logging a user onto zope

2010-09-20 Thread Richard Harley
Hello all

I'm trying to log someone onto Zope not using acl_users - how does this 
work? Ideally I want to pass variables through a logon page, 
authenticate against a postgres table then let the user have access to a 
certain folder. I tried ExUserFolder but it seems over the top for what 
I want and very dtml-heavy.

Thanks
Richard
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope-DB] Zope-DB Digest, Vol 72, Issue 1

2010-08-25 Thread Richard Harley
Please can someone explain why ORM is better than speaking directly to 
the database? Isn't this just  adding another layer of complexity which 
in huge databases is certainly not needed.


On 24/08/10 17:00, zope-db-requ...@zope.org wrote:
 Send Zope-DB mailing list submissions to
   zope-db@zope.org

 To subscribe or unsubscribe via the World Wide Web, visit
   https://mail.zope.org/mailman/listinfo/zope-db
 or, via email, send a message with subject or body 'help' to
   zope-db-requ...@zope.org

 You can reach the person managing the list at
   zope-db-ow...@zope.org

 When replying, please edit your Subject line so it is more specific
 than Re: Contents of Zope-DB digest...


 Today's Topics:

 1. ZSQL Question - Insert multiple rows in one statement?
(Mark Phillips)
 2. Re: ZSQL Question - Insert multiple rows in one statement?
(Andreas Jung)
 3. Re: ZSQL Question - Insert multiple rows in one statement?
(Sascha Gottfried)


 --

 Message: 1
 Date: Tue, 24 Aug 2010 08:03:21 -0700
 From: Mark Phillipsm...@phillipsmarketing.biz
 Subject: [Zope-DB] ZSQL Question - Insert multiple rows in one
   statement?
 To: zope-db@zope.org
 Message-ID:
   aanlktinwd33h-hp1upzwlyofl3u12qcfdz9pjmvdy...@mail.gmail.com
 Content-Type: text/plain; charset=iso-8859-1

 When I retrieve multiple values from a selection box, I need to create a
 loop somewhere to insert the multiple values (rows) into a table. Is there a
 way to do this within a ZSQL statement, or is it best to do the looping in a
 Python script?

 My specific example

 table 1 (Players) has information about players (i.e. team members for a
 sports team). There is a primary key - playerID
 table 2 (Seasons) has information about each season - primary key is
 seasonID
 table 3 (PlayerSeasons) has two columns - playerID and seasonID.

 The form to crud a player has a combobox where one can select multiple
 seasons for a player. When I do an add or update, I have to add one or more
 rows to the PlayerSeasons table. Does this loop have to be in a Python
 script, or can it be implemented in ZSQL? I looked at the 'multiple'
 keyword, but all the examples indicate that it apples to sql tests, such as
 testing against a set of values. I can't seem to find any examples where one
 is inserting multiple rows into a table.

 Thanks!

 Mark
 -- next part --
 An HTML attachment was scrubbed...
 URL: 
 http://mail.zope.org/pipermail/zope-db/attachments/20100824/e5237d80/attachment-0001.html

 --

 Message: 2
 Date: Tue, 24 Aug 2010 17:06:21 +0200
 From: Andreas Jungli...@zopyx.com
 Subject: Re: [Zope-DB] ZSQL Question - Insert multiple rows in one
   statement?
 To: Mark Phillipsm...@phillipsmarketing.biz
 Cc: zope-db@zope.org
 Message-ID:4c73dfed.2000...@zopyx.com
 Content-Type: text/plain; charset=iso-8859-1

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 I would assume that you can use DTML-IN for looping and generating
 multiple SQL statements of the same kind. You have to ensure that
 the statements having a proper delimiter (there was something in DTML?!
 DTML-SQLDELIMITER?...no idea, you need to checks the docs of this
 ancient technology).

 - -aj

 Mark Phillips wrote:

 When I retrieve multiple values from a selection box, I need to create a
 loop somewhere to insert the multiple values (rows) into a table. Is
 there a way to do this within a ZSQL statement, or is it best to do the
 looping in a Python script?

 My specific example

 table 1 (Players) has information about players (i.e. team members for a
 sports team). There is a primary key - playerID
 table 2 (Seasons) has information about each season - primary key is
 seasonID
 table 3 (PlayerSeasons) has two columns - playerID and seasonID.

 The form to crud a player has a combobox where one can select multiple
 seasons for a player. When I do an add or update, I have to add one or
 more rows to the PlayerSeasons table. Does this loop have to be in a
 Python script, or can it be implemented in ZSQL? I looked at the
 'multiple' keyword, but all the examples indicate that it apples to sql
 tests, such as testing against a set of values. I can't seem to find any
 examples where one is inserting multiple rows into a table.

 Thanks!

 Mark


 

 ___
 Zope-DB mailing list
 Zope-DB@zope.org
 https://mail.zope.org/mailman/listinfo/zope-db
  

 - -- 
 ZOPYX Limited   | zopyx group
 Charlottenstr. 37/1 | The full-service network for Zope  Plone
 D-72070 T?bingen| Produce  Publish
 www.zopyx.com   | www.produce-and-publish.com
 - 
 E-Publishing, Python, Zope  Plone development, Consulting


 -BEGIN PGP 

Re: [Zope-DB] Zope-DB Digest, Vol 72, Issue 1

2010-08-25 Thread Richard Harley
Hmmm..If the database was modeled properly in the first place if 
wouldn't be referenced in many different places therefore it would not 
require changes in tons of SQL methods.

SQL code isn't complicated, it does exactly what it says on the tin! 
(most of the time :)). ORM encourages lazy programming = problems later 
down the line.


On 25/08/10 11:09, Andreas Jung wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Richard Harley wrote:

 Please can someone explain why ORM is better than speaking directly to
 the database? Isn't this just  adding another layer of complexity which
 in huge databases is certainly not needed.
  
 Modifying the database schema (adding a new field) requires usually
 changes in tons of SQL methods..updating your ORM schema definition
 usually takes only one or a few lines of code.

 Or why the hell do you want to write complicated SQL code (I
 remember legacy code of a co-worker to tons of complex JOINs)
 yourself while you could implement the same functionality in much
 nicer way using Python?

 If you ask me: writing SQL is for masochists.

 - -aj
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.10 (Darwin)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

 iQGUBAEBAgAGBQJMdOvsAAoJEADcfz7u4AZjqyALwNWRbc5Pz3keM2x1wkDQfwfU
 WdtHLdNvLO6jIRMadMjlO4lOgPU0/ANIlkrUFgmstiEkpEt4zj8IIBWYZfdkrryo
 6Cb5OeYN+/stFURDSdqGPViJYxybbPFd2pmcX5HW9W9msxIsZsC7mmjLWgUWQEY4
 XXZBLbSTWB3DQt1gOXXNrntPzuSopad6QUb/Pqb/JWF7dtE3WYFY2/ar0YWOd/iU
 I7K3rKSTnQaBiDBwFrdrm/hHgeA34zlCs4M0qb8tWKCLsafwYNojAxdF28ScLSBD
 pHbxmcQY3aRqkHFPC1DZLqJNmMqbDitIpeUqgx6oLIc73trk2znRmT/HHFP+UhWU
 K72Qs6fBfEu1dvJYCA2iKFk2aE83ckqbdQnpwYtL0S3pVY3V5s1Z1ZQ4T1rz4+19
 BnuClXsZEWxfn8nn3uNZ0kpv9RI3Tw2qRgd4L5vk1s/mCFCRUi1riCKkEb/U8ygI
 kiJw/Zv6hJrgY74ZA67sfaymJ6hrSfE=
 =JGcb
 -END PGP SIGNATURE-


___
Zope-DB mailing list
Zope-DB@zope.org
https://mail.zope.org/mailman/listinfo/zope-db


[Zope] commit problems psycopg

2010-08-23 Thread Richard Harley
  We have had a problem with postgresql 8.3 on a Windows server 2008. I
  wonder whether there has been any other experiences like this. We have
  connected to Potsgres from Zope via a Psycopg adapter and noticed that
  sometimes when data is inserted via a form in Zope, the data is
  available in Zope but doesn't get committed to the database. This has
  come to a head over the weekend where at least one month's worth of data
  has disappeared and this includes changes to the actual database
  structure - luckily only on a testing machine, but concerning nevertheless.
  The data seemed to disappear after we upgraded to the most recent
  version of Zpsycopg2 database adapter, previously we were using version
  1 (I know it's old, we are only testing after all) and have never had
  these sorts of problem before. It's almost as if all the data and
  changes to the db were held in memory, and Postgres continued to work
  fine from there, but when the db adapter was changed and Zope restarted
  everything was cleared from memory.
  Has anyone had similar experiences or can anyone cast any light on where
  the problem may lie. To us it seems the db adapter is the most likely
  candidate but we can't understand how this could happen, explanations
  also welcome. Have posted this to psycopg list too.
Thanks


___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] adding swfobject in zope2

2010-08-19 Thread Richard Harley
On 19/08/10 10:02, Tapas Mishra wrote:
 I am using a Content Management System known as eduCommons.
 As per suggestions on this list I want to embed swfobject in it.
 I googled Zope2 documents since eduCommons is based on Zope2.
 Following results
 http://www.google.co.in/search?hl=enq=adding+swfobject+to+zope2aq=faqi=aql=oq=gs_rfai=
 did not gave me any link to the documentation.
 Please give some link on Zope2 documentation page
 as how can I add an swfobject in header section of eduCommons html pages.
 I had asked this question on their forum
 http://educommons.2416974.n2.nabble.com/how-to-integrate-swfobject-in-Zope-using-eduCommons-tp5439418p5439418.html
 but there was no response regarding this.
 I have static HTML pages for this which are working.



Something like this?

http://code.google.com/p/swfobject/wiki/documentation
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Storing DTML in SQL

2010-08-19 Thread Richard Harley
On 19/08/10 09:37, robert rottermann wrote:
 Am 18.08.2010 18:56, schrieb Andrew Milton:

 +---[ robert rottermann ]--
 | I think storing dtml in a db is wrong by design.
 | I do lots of dynamic websites that are generated from external data.
 | i had no need for a single line of dtml yet ...

 I've seen it used a lot in PHP systems like PHP-Nuke, where the widget
 code is executed out of strings in the db. Whether it's necessary or
 not in this instance is debatable.


  
 there is an important difference between php based systems and zope.
 a php site is made up from a bunch of code snippets embedded in html
 that are fed into a php interpreter.
 where these snippets come from is unknown to the php interpreter. one of
 the reasons (I assume) that such systems tend to be riddled with
 security problems

 zope is an application server that sits between the internet and the
 (physical) server on which it runs.
 it so divides its univers in an unsave and a save part. everything that
 comes from the internet, that includes operations performed TTW (trough
 the web), is unsave and must be authenticated against zopes strict
 permission system.
 everything that comes from the server side (eg. from files loaded from
 the server) is considered save and is not security screened (or at least
 not as tightly).

 zopes application server offers you two ways to create dtml objects. TTW
 and from a file. one tightly screens one less so.
 now what you propose is a third way. get the dtml objects from a database.
 this could for sure be done
 but..
 you have to write a kind of interpreter that creates an dtml object,
 sets up its context, executes it and manipulates its own environment in
 a meaningful way.
 next to that this interpreter has to set up its own security context to
 avoid to punch holes into zopes defenses.

 you can imagine, this is no easy chore.

 and it would probably be foolish if one tried to implement it.
 dtml is just not the way to go. it is a dead end (its developer decided
 so). it is replaced by tal and zope 3 (now bluebream) components that
 are far more powerfull and flexible.
 and, alas, not THAT easy to grasp

 robert


By far the majority of new deployments use zope 2 though...





 ___
 Zope maillist  -  Zope@zope.org
 https://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
   https://mail.zope.org/mailman/listinfo/zope-announce
   https://mail.zope.org/mailman/listinfo/zope-dev )


___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Storing DTML in SQL

2010-08-18 Thread Richard Harley
On 18/08/10 17:38, Andrew Milton wrote:
 +---[ Garry Saddington ]--
 | Andrew Milton wrote:
 |  +---[ Garry Saddington ]--
 |  | Garry Saddington wrote:
 |  |  Justin Dunsworth wrote:
 |  |  I am currently working on a project where I am storing HTML within a
 |  |  MySQL database to display dynamic pages and content in sequences. I
 |  |  would like to be able to store DTML within the tables as well and be
 |  |  able to call them within the page to display that content. I tried
 |  |  mixing the DTML in with the HTML and it shows the HTML correctly but 
 no
 |  |  DTML.
 |  |
 |  |  Is it possible to even do this? Are there other suggestions on how 
 to go
 |  |  about this?
 |  |
 |  |  The closest I have found is on Zopelabs
 |  |  (http://www.zopelabs.com/cookbook/1078612026)
 |  |
 |  | Sorry wrong recipe try this:
 |  |
 |  | http://www.zopelabs.com/cookbook/993850737/1011691351
 |
 |  Do I really have to explain why that particular recipe is a bad idea? d8)
 |
 | Just trying to be helpful. I did say that it was the only thing I can
 | find and I did not recommend it.
 | If you would care to share the problems of the recipe on the list then I
 | am sure all those reading who are new to Zope would benefit;)

 Since python scripts are web callable and something has to be passed
 in... The phrase execute arbitrary code is nearly always quickly
 followed by the phrase remote exploit and lots of sad faces (and
 then some finger pointing d8)


If that is the case, aren't all python scripts within Zope potentially 
exploitable?
___
Zope maillist  -  Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope-dev )