Re: [Zope] dtml-sqlvar quote

2000-10-20 Thread Tony McDonald
Hi all How can i pass a string to a sql method that won't be quoted. i.e so i can do somthing like this . group by foo,blah order by dtml-sqlvar spam thanks mark don't quote it? ... order by dtml-var spam I use this all the time for things like select * from data where dtml-var

[Zope] Newsletter in Zope

2000-10-20 Thread Stephan Goeldi
I am looking for a way to enable a Newsletter in Zope. I want the visitors to subscribe to the newsletter. Then they receive a mail to verify the subscription. Later I can write and send a Newsletter to all subscripted visitors. Is there already a solution in Zope for that?

[Zope] IIS and Zope share same problem :-S

2000-10-20 Thread Chris Withers
MICROSOFT WEBSERVERS LAID OPEN FOR ALL TO SEE by Dave Murphy, [EMAIL PROTECTED] Microsoft is scrambling to repair damage caused by a security hole in its IIS 4 5 webserver that runs on Windows NT/2000. Microsoft claims over four million IIS websites, and each one of them is at risk of

Re: [Zope] IIS and Zope share same problem :-S

2000-10-20 Thread Andrew Kenneth Milton
+---[ Chris Withers ]-- | MICROSOFT WEBSERVERS LAID OPEN FOR ALL TO SEE | by Dave Murphy, [EMAIL PROTECTED] | | Microsoft is scrambling to repair damage caused by a | security hole in its IIS 4 5 webserver that runs on | Windows NT/2000. Microsoft claims over four

Re: [Zope] ZDiscussions for Zope 2.2.2

2000-10-20 Thread Chris Withers
Cary O'Brien wrote: 2) add __allow_access_to_unprotected_subobjects__ in a few places. That's not good :-S But hey, I had to do it to get Squishdot to work with Zope 2.2 as well :-( cheers, Chris ___ Zope maillist - [EMAIL

Re: [Zope] IIS and Zope share same problem :-S

2000-10-20 Thread Pierre-Julien Grizel
Hum... A possible way to solve this problem is to practice the "you can't do ANYTHING but..." policy... And, thus, according proxy roles to the methods that must access it, such as index_html. I know it's constraining but with a little work we can end up with something quite secure secret.

[Zope] ZMySQL and MySQLdb Versions

2000-10-20 Thread Ragnar Beer
Howdy! When I go to the download section on zope.org looking for a way to connect Zope and MySQL I can find the following: - Zope MySQL Database Adapter, 2000/07/20 by mordred (ZMySQLDA-1.2.0.tar.gz) - ZMySQLDA, 2000/07/20 by MikeP (ZMySQLDA-1.1.3-nonbin.tar.gz) - An Interface for MySQL,

[Zope] Re: [Zope-dev] Problems with offline MS IE 5

2000-10-20 Thread Jens Grewen
I was fighting with the same problem and I thought it depends on my proxy setting. But now I thing it depends on the Browser version because I installed IE5.5 and the problem was gone. (ocularly same settings). - Original Message - From: "Ross Boylan" [EMAIL PROTECTED] To: [EMAIL

Re: [Zope] IIS and Zope share same problem :-S

2000-10-20 Thread Ragnar Beer
As I already suggested ages ;) ago (and still didn't put into practice) it would here again be best to deny everything that isn't explicitly allowed (e.g. allow whatever ends with _html or .html and deny everything else) but then I would have to go over the whole website and make bazillions

Re: [Zope] ZMySQL and MySQLdb Versions

2000-10-20 Thread Stefan H. Holek
On Fri, 20 Oct 2000, Ragnar Beer wrote: - Zope MySQL Database Adapter, 2000/07/20 by mordred (ZMySQLDA-1.2.0.tar.gz) - ZMySQLDA, 2000/07/20 by MikeP (ZMySQLDA-1.1.3-nonbin.tar.gz) - An Interface for MySQL, 2000/07/20 by adustman (MySQLdb-0.1.2.tar.gz) I recently got confused myself about

[Zope] Problems with mysql and sql methode

2000-10-20 Thread Jens Grewen
Hi, I have a problem with an SQL Methode with the this sql statement select PAYMENT.PYNAME, PAYMENT.PYPRICEfrom MERCHANTPAYMENT, PAYMENTwhere MERCHANTPAYMENT.MEID = 418 and MERCHANTPAYMENT.PYID = PAYMENT.PYID on the following tables: MERCHANTPAYMENT -

RE: [Zope] dtml-sqlvar quote

2000-10-20 Thread Farrell, Troy
It is not safe if you have malicious users. You will need to pass your dtml-var name="search_field" through a filter. This will help. A better example is a user taking advantage of an insert method: insert into data values (dtml-var name="value_1", dtml-var name="value_2", dtml-var

[Zope] Recursively creating folders in python

2000-10-20 Thread Robert Joseph Roos
This is something I need to have done yesterday... dtml-in iterates over a list, and dtml-with adds namespaces, but how do I recursively enter INTO a folder, creating objects within that folder from *it's* point of view? Is this even possible in dtml, or do i need to use raw python? If so, do

[Zope] How to type check OR better list selector ways

2000-10-20 Thread Robert Joseph Roos
dtml-expr="_.type(some_variable_of_unknown_type)" causes a name error, while other python builtins like _.string(some_int) work fine. What gives? Is there some other "zopist" way to type-check? More generally, is there a better way to deal with the annoying fact that multiple selectors return

[Zope] unauthorized error

2000-10-20 Thread Kevin Worth
Upon upgrading from 2.1.3 to 2.2.2, I have run into a strange problem. I have a couple of custom products (developed here, but not by me, so I'm not sure of the specifics, but i can find them out. I can edit current instances of the product, but I cannot add new ones because give me an

[Zope] dtml document bug

2000-10-20 Thread Dmitry Slusarchuk
I'm new to Zope development but I have already encountered such a problem: dtml-var myimage from dtml document generates the following: Zope Error Zope has encountered an error while publishing this resource. Error Type: AttributeError Error Value: __call__ this problem disappears when I do

[Zope] Server Access Control

2000-10-20 Thread Haonan Tan
How to enforce access control on client IP or host name in the same way that Apache .htaccess does it. Or are there better ways doing it in Zope? Many thanx. Haonan Tan ___ Zope maillist - [EMAIL PROTECTED]

RE: [Zope] dtml-in loop to capture records

2000-10-20 Thread Richard Folwell
Okay, this works fine, in MOST of my forms, but I have other forms where this doesnt work at all and I get errors saying that the ITEM is a bad request. I dont get it, what am I missing here that this works some places and in other places with almost identical syntax, it falls over. I came

RE: [Zope] Problems with mysql and sql methode

2000-10-20 Thread Farrell, Troy
You may try: SELECT pyname, pyprice FROM payment WHERE merchantpayment.meid = 418 AND merchantpayment.pyid = payment.pyid I have a feeling mysql is not liking you for not selecting results from table MERCHANTPAYMENT becuase you said you would. Troy -Original Message- From: Jens Grewen

Re: [Zope] How to type check OR better list selector ways

2000-10-20 Thread Jim Washington
Hi, Robert BTW, this is a FAQ, but: use the :list extension in your html. e.g., select multiple name="dtml-var form_save_name:list" dtml-in thelistitems option value="dtml-var sequence-item"dtml-var sequence-item/option /dtml-in /select Works for checkboxes, too! -- Jim Washington Robert

[Zope] O'Reilly Book Tecnical Reviewers

2000-10-20 Thread Michel Pelletier
Greetings, O'Reilly is looking for 4 or 5 technical reviewers for the book. http://www.zope.org/Members/michel/ZB/ Technical reviewers get paid either a small honorarium or get free copies of the book (I am unaware of the exact details). I'm sure this message will elicit a *flood* of

Re: [Zope] Problems with mysql and sql methode

2000-10-20 Thread Jens Grewen
Ok know I get this problem Error, _mysql.OperationalError: (1109, "Unknown table 'MERCHANTPAYMENT' in where clause") SQL used: select PYNAME, PYPRICE from PAYMENT where MERCHANTPAYMENT.MEID = '418' and

[Zope] Acquisitive

2000-10-20 Thread Spicklemire, Jerry
Hi Zope Fans, I ran into an odd quirk today, and I'm hoping someone has an insight to share. There is a simple text string stored as a DTML Method, with ID = "set_table_0", e.g.: 'border="0" cellpadding="0" cellspacing="0"' When set_table_0 is in the Zope root folder, it isn't

[Zope] Acquisitiver and Acquisitiver

2000-10-20 Thread Spicklemire, Jerry
OK, now I'm really confused. I stumbled on a way to make the DTML Method work, that is, the one that wasn't being found before, via Acquisition. All I have to do is forget to add the terminating ';' in : table dtml-set_table_0; so that it looks like so: table

[Zope] GUF error: Unauthorized...

2000-10-20 Thread Cesar A. K. Grossmann
Hi! I have created a GUFTest folder. It runs perfectly with the user 'jorge', provided with the GUF. After I have changed the acl to use a SQL connection, I'm getting the error bellow (in the log of the system): GUF[7909]: http://localhost.localdomain:8080/GUFTest/acl_users/userAuthenticate

Re: [Zope] IIS and PCGI

2000-10-20 Thread Andy McKay
Well I fixed this using a ISAPI filter which I will release soon (once I have some time) that takes a url /a/b/c/x.pcgi/f/g/h, and passes /a/b/c/x.pcgi to IIS so the file will run and /f/g/h to Zope. My next question is has anyone succeeded in getting this to work to another box over a mapped or

[Zope-dev] Object references from dtml

2000-10-20 Thread Ross Boylan
I have a log composed of sublogs, and so on. I would like for people to be able to see some kind of summary (e.g., short versions of the logs down n levels) on the screen and then click on one of interest and see a fuller display of it. Is there a good way to do this using dtml? I've

Re: [Zope-dev] Inheritable Propertysheets!???!!?!?!?!!

2000-10-20 Thread Alexander Schonfeld
Thanks, that does seem to do the trick. :) Much appreciation!! I added a propertysheets like this: ParentClass.Propertysheet.defaultProps.someprop ChildClass1.Propertyshoot.props.someprop ChildClass2.Propertyshoot.props.someprop (to override the parent's default when needed) It sees the

Re: [Zope-dev] Object references from dtml

2000-10-20 Thread Ender
Ross Boylan wrote: I have a log composed of sublogs, and so on. I would like for people to be able to see some kind of summary (e.g., short versions of the logs down n levels) on the screen and then click on one of interest and see a fuller display of it. Is there a good way to do this

[Zope-dev] Method binding

2000-10-20 Thread Chris Withers
Maybe the Zope-Dev guys have comments on this From: Jim Fulton [EMAIL PROTECTED] Michel, You have advocated that methods should always be bound to the objects they are accessed in. You argue that there should be no choice in the matter. I have to disagree strongly. I'll try to

[Zope-dev] Michel's Reply

2000-10-20 Thread Chris Withers
From: Michel Pelletier [EMAIL PROTECTED] Jim Fulton wrote: Michel, You have advocated that methods should always be bound to the objects they are accessed in. You argue that there should be no choice in the matter. I advocate more points than that, like being able to document python

[Zope-dev] Python and Perl scripts

2000-10-20 Thread Chris Withers
This one is probably the most useful of the lot ;-) From: Michel Pelletier [EMAIL PROTECTED] Greetings, Well, Jim, Evan, Brian and I pow-wowed yesterday and came up with an interesting change. The world 'Method' is too overlaoded, as it means too much to too many people. Also, Python Methods

[Zope-dev] My $0.02

2000-10-20 Thread Chris Withers
From: Michel Pelletier [EMAIL PROTECTED] Well, Jim, Evan, Brian and I pow-wowed yesterday and came up with an interesting change. The world 'Method' is too overlaoded, as it means too much to too many people. Also, Python Methods don't work like methods in python, which was my argument,

[Zope-dev] Hippo Feed and Acquisition

2000-10-20 Thread Chris Withers
Toby Dickenson wrote: Thats fine until: snip hilarious hippo metaphor I liked that :-)) very accurately sums up some of the problems... Although I'm not sure they're problems with the method binding this thread was about. The problems you describe seem to be with Acquistion in general.

Re: [Zope-dev] Python and Perl scripts

2000-10-20 Thread jpenny
On Fri, Oct 20, 2000 at 01:01:59PM +0100, Chris Withers wrote: This one is probably the most useful of the lot ;-) From: Michel Pelletier [EMAIL PROTECTED] Greetings, Well, Jim, Evan, Brian and I pow-wowed yesterday and came up with an interesting change. The world 'Method' is too

[Zope-dev] FYI: away for a few days

2000-10-20 Thread Phillip J. Eby
I'm going to be out of town for a few days, and won't be as quick to respond to e-mails, if I respond at all during that time. Ty will still be around, though, to answer all your ZPatterns and LoginManager questions. Right, Ty? ;) ___ Zope-Dev

[Zope-dev] Re: Michel's Reply

2000-10-20 Thread Michel Pelletier
Chris Withers wrote: From: Michel Pelletier [EMAIL PROTECTED] Hmm. I thought this was a internal series of emails, I just now noticed that zope-perl got cc:ed on them somewhere in the middle. Oh well, it is some good discussion; I allways like to stir the shit! -Michel

Re: [Zope-dev] Python and Perl scripts

2000-10-20 Thread Michel Pelletier
[EMAIL PROTECTED] wrote: 'Script' objects make a lot of sense, they don't overload the concept of methods, they describe an action that people commonly want to do (script the web) and they clear up a lot of potential confusion for newbie and old-hat alike. Oh, yuck! Now we

Re: [Zope-dev] Python and Perl scripts

2000-10-20 Thread jpenny
On Fri, Oct 20, 2000 at 02:18:47PM -0700, Michel Pelletier wrote: [EMAIL PROTECTED] wrote: The proposal is not for PythonScript but a "Python Script". We are not inventing a new language, this is python, we are just coming up with the name for an object. Don't capitalize it and you'll

Re: [Zope-dev] Python and Perl scripts

2000-10-20 Thread Michel Pelletier
[EMAIL PROTECTED] wrote: snip good discussion Now we just need a generic term, which will not cause other confusions later on down the road for the concept. I really don't like script, especially next to a language name (in the web domain). You don't like function (which was not my

Re: [Zope-dev] Python and Perl scripts

2000-10-20 Thread Steve Waterbury
Michel Pelletier wrote: snip good discussion and move on to something REALLY silly! :^ [EMAIL PROTECTED] wrote: descriptive. Widget has technical meaning. Perhaps task or job are suitable, as in Safe Python Task Safe Python Job Safe Python Subtask Safe Python Function Safe

Re: [Zope-dev] Python and Perl scripts

2000-10-20 Thread Michael Bernstein
Michel Pelletier wrote: Keep in mind also that we are moving towards a new architecture with "Documents" and "Templates" (ala HyperDOM). I think Scripts fits right in there: Documents, Templates and Scripts or Documents, Templates and Methods I tend to think of things as:

[Zope-dev] Re: [Zope] IIS and PCGI

2000-10-20 Thread Andy McKay
Well I fixed this using a ISAPI filter which I will release soon (once I have some time) that takes a url /a/b/c/x.pcgi/f/g/h, and passes /a/b/c/x.pcgi to IIS so the file will run and /f/g/h to Zope. My next question is has anyone succeeded in getting this to work to another box over a mapped or