----- Original Message -----
From: "Mark, Jonathan (Integic)" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Friday, January 26, 2007 10:29 AM
Subject: [Zope] Is there any way to turn off the publishing of
externalmethods to the web in Zope?
I have an external method which uses eval(). I would like to prevent anyone
from calling this method from inside a URL, e.g.,
myzopesite/myexternalmethod?myvar=deletemyfiles()
Rather, I wish for only Zope objects such as Python Scripts to be able to
call this external method. Is there any way to turn off the publishing of
external methods to the web in Zope?
In your external method you could put something like:
if string.find(self.REQUEST['ACTUAL_URL'], 'ExtMethodName') != -1:
return self.REQUEST.RESPONSE.redirect('BadUserURL')
hth
Jonathan (another one)
_______________________________________________
Zope maillist - [email protected]
http://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )
