Zope August 2000

zope@zope.dev

393 participants
1064 discussions

Problem displaying Informix INTERVALs using DTML
by Raymond Kelly 01 Aug '00

01 Aug '00

Hi, I am using Zope on a PC running on NT and using ODBC to connect to a Informix database. I am running a query that returns a column of INTERVAL type, calculated by subtracting to DATE types. The query, when tested using the test tab, displays the results as I expected. However, when I try to display the results using either a search interface, or my own DTML method, NETSCAPE 4.7 refuses to display the results. Instead it reckons it cannot handle the resultant HTML from the DTML used to produce the results page. Instead, it decides the best thing to do is save the file but when it is reloaded it load just fine. IE5 does get a little further and it will display the page but there are numerous strange characters at the end of the expected interval field. This seems like some additional characters are coming back from the query and they may cause Netscape to trip up and IE5 to display odd characters. What I have tried to do, without sucess, is to get access to the DTML, within Zope, which produces the results of a test on an SQL query. This is where the solution lives!, but I plain just can't find it. I have tried formating the the INTERVAL type and truncating but nothing yields the same results as the 'test' DTML. Any ideas for a poor Zope newbie. Thanks Raymond

3 2

Re: [Zope] Starting Zope
by Cary O'Brien 01 Aug '00

01 Aug '00

> > Interesting argument. However, consider this: if you completely trust your > 'firewalled' box, then why not run the web server as root? One response, Protection of the system from simple mistakes by trusted users? Also root can do a lot more, such as putting interfaces into promiscious mode. So the idea is to just lift the bind-to-low-ports check. > in your case is the fact that you mention your trust on users(humans are > the most easy to compromise, however that argument is a bit OT). However, > do you trust all of your webserver code? Do you trust your cgi-bin > scripts and applications? And by trust I not only mean harmful intent by > the authors of software, but unintentional bugs which can be exploited, > and will be given the privilege to bind to <1024 ports even when they run > as a user with least privileges. > My revised thinking is that the patch should only lift the restriction for just the necessary ports. Another idea is to do it with groups, say let group n be a "net-privileged" group. -- cary > Just my opinion. > > nitesh. > > > On Sun, 30 Jul 2000, Cary O'Brien wrote: > > > > Cary O'Brien wrote: > > > > > > > Well... > > > > > > > > If you are running on Linux you could simply edit the kernel code to > > > > elimitate the check on being root to bind to low ports. That's what > > > > we did. > > > > > > Which is an even worse idea. > > > > > > > Why? On a sufficiently firewalled off box, where the few logins are > > completly trusted, what's the diff? If you were worried about people > > cracking a user account and getting underneath telnet, than limit the > > lifting of the restriction to port 80. If you are concerned that > > non-root users could launch attacks from low ports at other machines, > > assuming that only good guys can come from low ports is pretty naive. > > > > The whole business about not letting anyone but root bind to low ports > > makes sense for a public access machine where all the first year > > engineering students have an account, but for a dedicated application > > server it is kind of misdirected. You ought to be running next to > > nothing but the application, and you had better trust everyone that > > you give a login to, and you out to have the thing locked > > down/firewalled well. So the tiny bit of possible protection may not > > be worth the hassle/risks of writing your own suid-wrapper, or the > > complexity of having a redirect and messing with site-access so that > > the port numbers in the zope -- what it is that parameter -- base or > > whatever, comes out write. > > > > Just for fun - does NT have the same restriction? > > > > -- cary > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://lists.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > > http://lists.zope.org/mailman/listinfo/zope-dev ) > > > > > > > > --__--__-- >

3 2

dtml-tree question
by Jonothan Farr 01 Aug '00

01 Aug '00

What is the difference between using the dtml-tree tag in a dtml method and using it in a dtml document? I have code that works perfectly in a dtml method but when I try the exact same code in a dtml document it doesn't display anything. Is it because the document is at the top of the namespace stack instead of the request object in the dtml document case, but not in the dtml method case? My branches method is a zsqlmethod that acquires its parameter from the namespace. Here's the code, if that helps: <dtml-var standard_html_header> <dtml-tree branches=select_subprojects id=project_id> <a href="edit_project?project_id=&dtml-project_id;">edit</a>  <a href="view_project?project_id=&dtml-project_id;"><dtml-var project_name></a> </td> <td align=right valign=top><dtml-var task_count> </dtml-tree> <dtml-var standard_html_footer> select_subprojects is a zsqlmethod, the fields are project_id, project_name, and task_count. It takes one parameter, project_id which it acquires from the result set of the previous call to itself. I'm stumped. I could just use a dtml method instead of a document but I want to understand this. Thanks, --jfarr

2 2

How do I control iteration over XML elements?
by Jean Jordaan 01 Aug '00

01 Aug '00

Hi all If I have (in an XML Document): <teams> <team> <name>Name of team</name> <desc>White papers, brochures, case studies.</desc> <member class="leader">Tracey</member> <member>Eduan</member> <member>Jacqui</member> </team> </teams> Then: <dtml-in "teams[0].getElementsByTagName('team')"> <dtml-var "text_content('member')"> </dtml-in> gives me this: TraceyEduanJacqui I'd like to format the output, putting 's between all the names, for example. How do I do that? Cheers, -- jean

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

Zope August 2000