Re: [Zope-dev] version status

2003-06-16 Thread Jamie Heilman
Brian Lloyd wrote: > Have you tested to ensure that the 2.6.2 (CVS) is still open to the > DoS? If so, could you give me a quick scenario that I could use to > reproduce it? I haven't tested 2.6.2, I tested CVS HEAD, assuming the code change to both was the validated_hook in Zope/App/startup.py

Re: [Zope-dev] Request method

2003-06-16 Thread Oliver Bleutgen
Anitha George wrote: Hii Could any of you please tell me what is the request method used in Zope to go back to the page from where I have come. Plss do send a reply soonnn... Thanks Anitha Anitha, I think questions of this nature are better sent to [EMAIL PROTECTED] (zope-dev mostly means devel

[Zope-dev] Request method

2003-06-16 Thread Anitha George
Hii Could any of you please tell me what is the request method used in Zope to go back to the page from where I have come. Plss do send a reply soonnn... Thanks Anitha _ Add photos to your messages with MSN 8. Get 2 months FREE*.

Re: [Zope-dev] version status

2003-06-16 Thread Oliver Bleutgen
Shane Hathaway wrote: Jamie Heilman wrote: Whats the status of versions for 2.6.2 and 2.7? Have there been any decisions reached? I saw Jim's code get checked in but it won't stop the DoS I posted. Say it a little louder. Here is what I think you're saying: - Anonymous users can still open a

Re: [Zope-dev] version status

2003-06-16 Thread Toby Dickenson
On Sunday 15 June 2003 08:11, Jamie Heilman wrote: > Whats the status of versions for 2.6.2 and 2.7? Have there been any > decisions reached? I saw Jim's code get checked in but it won't > stop the DoS I posted. Ive not tested Jims code, but it looks to me like it *should* stop that attack. Hav

Re: [Zope-dev] version status

2003-06-16 Thread Shane Hathaway
Jamie Heilman wrote: Whats the status of versions for 2.6.2 and 2.7? Have there been any decisions reached? I saw Jim's code get checked in but it won't stop the DoS I posted. Say it a little louder. Here is what I think you're saying: - Anonymous users can still open a versioned database conne

RE: [Zope-dev] Re: [Zope-Coders] Bug day?

2003-06-16 Thread Brian Lloyd
> I assume you meant Tuesday the 17th. > > It is currently the 16th, but it is not yet Tuesday. However, if > it is the > management's decision that today shall be Tuesday, than I shall > do my duty > and respect that decision ;^) > > time-is-relatively y'rs, > > -Casey Rats - you've foile

[Zope-dev] Re: [Zope-Coders] Bug day?

2003-06-16 Thread Casey Duncan
I assume you meant Tuesday the 17th. It is currently the 16th, but it is not yet Tuesday. However, if it is the management's decision that today shall be Tuesday, than I shall do my duty and respect that decision ;^) time-is-relatively y'rs, -Casey On Wednesday 11 June 2003 10:08 pm, Brian L

Re: [Zope-dev] storing passwords

2003-06-16 Thread Chris Withers
[EMAIL PROTECTED] wrote: Or SimpleUserFolder: create a user folder class in a Zope product that subclasses both SimpleUserFolder and OFS.Folder. Then put ZSQL methods and a few TTW python scripts in the folder contents of an instance of this class to make it work. I've done something similar to

Re: [Zope-dev] storing passwords

2003-06-16 Thread Chris Withers
Markus Bengts wrote: I want to use the same usernames and passwords in Zope and some other servers. The usernames and password digests are stored in a PostgreSQL database, and a given username and password -pair can be checked with a simple SQL-query. SimpleUserFolder will let you do this with the

Re: [Zope-dev] ZMI tweak

2003-06-16 Thread Toby Dickenson
On Monday 16 June 2003 08:05, Toby Dickenson wrote: > On Saturday 14 June 2003 16:53, Christian Theune wrote: > > When catching up with the mail in the mailinglist, I remembered a small > > annoyance I'm having with the ZMI. I really appreciate the errorlog and > > am using it frequently. But if yo

Re: [Zope-dev] ZMI tweak

2003-06-16 Thread Toby Dickenson
On Saturday 14 June 2003 16:53, Christian Theune wrote: > When catching up with the mail in the mailinglist, I remembered a small > annoyance I'm having with the ZMI. I really appreciate the errorlog and > am using it frequently. But if you don't put it it's own window (or tab) > you always need tw