> This is not a good idea anyway. > 1) it lets every user knowing the external method > connect to every database on your host (depending > > on credentials if any) > > 2) even worser it enables the user to issue any > raw SQL string to the database, including but not > limited to DROP table; DROP database; etc.
This is not be the real thing on the site. It is just what i develop and see. The site is not up yet and the interface and the credentials are not set. I just have the spefific interface now for trying-testing-learning. I can see your point and agree 100% > > 3) by not using ZOPEs infrastructure (read: > Z(yourdb)DA, > ZSQL-Methods), you have the expensive connect > operation > every time, loose the ability to easily work with > zopes > transactions, have to quote and unquote values > and so on. > > So get a ZODBCDa or something like that and use it. I have allready used that and i am trying what i wrote just for learning some python and do some custom things. I am sure you are right and sooner or later i will also prefer what you suggest (when i know more about what zopes transactions etc. are about) after reading some more on the Zope book. > > here you would write: > > <dtml-in expr="TestODBCEM(sysDSN=sysDSN, ...)"> > > because your external Method does not magically > read the REQUEST object. (You could do that there > by using self.REQUEST.get('sysDSN','default') ) I knew that it should be some other way that the correct syntax should be used. i had wrote <dtml-in expr="TestODBCEM('<dtml-var sysDSN>','<dtml-var usr>', '<dtml-var mypass>', '<dtml-var sSQL>')"> witch was realy wrong and maybe stupid, but i'm sure i'll get better soon with that kind of community and documentation. I am realy sory if i ask some stupid questions but as i told you i will soon get better. Thank you very much for both DTML and Python. > See also: > > http://www.plope.com/Books/2_7Edition/RelationalDatabases.stx > > > > -- > Tino Wildenhain <[EMAIL PROTECTED]> Thank you for your precious help on this. Thomas Apostolou ___________________________________________________________ Χρησιμοποιείτε Yahoo!; Βαρεθήκατε τα ενοχλητικά μηνύματα (spam); Το Yahoo! Mail διαθέτει την καλύτερη δυνατή προστασία κατά των ενοχλητικών μηνυμάτων http://login.yahoo.com/config/mail?.intl=gr _______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )