[Zope-dev] IIS / login bug

2002-07-11 Thread seb bacon
There is a bug in IIS[1] which causes cookies to be dropped during a redirect. The result in the CMF is that a login fails when it is combined with a redirect, as happens following an attempted access of a forbidden resource when using the CookieCrumbler. Now, I'm not too familiar with the

Re: [Zope-dev] IIS / login bug

2002-07-11 Thread Jens Vagelpohl
There is a bug in IIS[1] which causes cookies to be dropped during a redirect. a bug in IIS??? no way...:P Should my approach work? Are there better workarounds? i don't know your situation exactly, but if IIS is not a pressing requirement you can use apache for windows. jens

Re: [Zope-dev] vulnerability in stock Zope

2002-07-11 Thread Shane Hathaway
seb bacon wrote: Production sites running a stock Zope are vulnerable to abuse of their server if they have not removed the 'Examples' folder. For example, anyone could use http://notcarefulenough.com/Examples/FileLibrary as a warez repository. Are you sure? I get an Unauthorized error

Re: [Zope-dev] vulnerability in stock Zope

2002-07-11 Thread seb bacon
Shane Hathaway wrote: seb bacon wrote: Production sites running a stock Zope are vulnerable to abuse of their server if they have not removed the 'Examples' folder. For example, anyone could use http://notcarefulenough.com/Examples/FileLibrary as a warez repository. Are you

Re: [Zope-dev] vulnerability in stock Zope

2002-07-11 Thread Shane Hathaway
seb bacon wrote: Shane Hathaway wrote: seb bacon wrote: Production sites running a stock Zope are vulnerable to abuse of their server if they have not removed the 'Examples' folder. For example, anyone could use http://notcarefulenough.com/Examples/FileLibrary as a warez

Re: [Zope-dev] vulnerability in stock Zope

2002-07-11 Thread Shane Hathaway
seb bacon wrote: Shane Hathaway wrote: seb bacon wrote: Production sites running a stock Zope are vulnerable to abuse of their server if they have not removed the 'Examples' folder. For example, anyone could use http://notcarefulenough.com/Examples/FileLibrary as a warez

Re: [Zope-dev] vulnerability in stock Zope

2002-07-11 Thread seb bacon
Production sites running a stock Zope are vulnerable to abuse of their server if they have not removed the 'Examples' folder. For example, anyone could use http://notcarefulenough.com/Examples/FileLibrary as a warez repository. Are you sure? I get an Unauthorized error (but not until

[Zope-dev] ?determine if x is a string or array in PythonScript

2002-07-11 Thread Tim Hoffman
Hi I must be stupid or something, but I can't for the life of me work out a simple way of determining if a variable contains a string or array, in a PythonScript in Zope. I can't import type and or use type() function. isinstance doesn't work because I can't give a type as the second arg. I

Re: [Zope-dev] ?determine if x is a string or array in PythonScript

2002-07-11 Thread Shane Hathaway
Tim Hoffman wrote: Hi I must be stupid or something, but I can't for the life of me work out a simple way of determining if a variable contains a string or array, in a PythonScript in Zope. I can't import type and or use type() function. isinstance doesn't work because I can't give a

Re: [Zope-dev] ?determine if x is a string or array in PythonScript

2002-07-11 Thread Martijn Pieters
On Thu, Jul 11, 2002 at 05:22:48PM +0800, Tim Hoffman wrote: I must be stupid or something, but I can't for the life of me work out a simple way of determining if a variable contains a string or array, in a PythonScript in Zope. I can't import type and or use type() function. isinstance

Re: [Zope-dev] ?determine if x is a string or array in PythonScript

2002-07-11 Thread Martijn Pieters
On Thu, Jul 11, 2002 at 04:10:33PM -0400, Shane Hathaway wrote: Python scripts provide a special function, same_type(), for this purpose. Example: if same_type(s, ''): s = [s] Much better than my hacked-up solution. :p -- Martijn Pieters | Software Engineer mailto:[EMAIL PROTECTED]

Re: [Zope-dev] ?determine if x is a string or array in PythonScript

2002-07-11 Thread Tim Hoffman
Thanks shane I missed that in the doc's, I have to admit I have done some pretty crusty things in the past to try and work it out, like checking for methods etc.. which always struck me as 1, quite possibly incorrect especially if I got a dictionary with an element with the same name as the