On Jul 30, 4:06 am, mdipierro wrote:
> The problem with IRC is that because of my job I cannot be there
> often. Moreover even if things gets resolved they are not recorded.
We can get the channel logged.
#sahana does this: http://logs.qgis.org/sahana/
This then makes it searchable via Google...
On Jul 30, 1:14 am, mdipierro wrote:
> auth.settings.registration_requires_verification = False
auth.settings.registration_requires_verification = True
F
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"web2py-user
How do we get it logged?
Massimo
On Jul 30, 2:06 am, Fran wrote:
> On Jul 30, 4:06 am, mdipierro wrote:
>
> > The problem with IRC is that because of my job I cannot be there
> > often. Moreover even if things gets resolved they are not recorded.
>
> We can get the channel logged.
> #sahana do
Hi,
On Jul 30, 5:23 am, Massimo Di Pierro wrote:
> Armin (mistuhiko),
>
> have you joined the web2py IRC because you are a web2py user or for
> the only purpose of discouraging new users?
If you do a /whois mitsuhiko you will find out that I'm in the IRC
channel of every Python framework and m
Please do not feel stalked. I was not on the IRC but I also got a lot
of emails about your posts on IRC, so I felt compelled to address this
issue publicly. I was not the first to refer to your name on this
list. I just responded to a previous post.
Anyway. I just asked you a question and I could
Hi,
On Jul 30, 9:49 am, mdipierro wrote:
> Anyway. I just asked you a question and I could use a straight answer:
> do you consider yourself a web2py user?
No. Neither am I a repoze user yet I watch the development.
> I have one more. Which version of web2py are you running?
I'm not *running* a
To web2py users.
Please do not stalk Armin. He is a talented developers, author of
Jinja2 and other open source products.
We are glad to have his opinion and hope it will be a constructive
one.
Massimo
On Jul 30, 2:55 am, Armin Ronacher
wrote:
> Hi,
>
> On Jul 30, 9:49 am, mdipierro wrote:>
And please let's close this thread since it does not help anybody.
On Jul 30, 3:01 am, mdipierro wrote:
> To web2py users.
>
> Please do not stalk Armin. He is a talented developers, author of
> Jinja2 and other open source products.
> We are glad to have his opinion and hope it will be a constr
Fran - thanks. that's great. C
On Jul 29, 8:53 pm, Fran wrote:
> On Jul 29, 8:13 pm, Carl wrote:
>
> > for the future: being able to set my own form for register() would be
> > real nice. at present I can do that only if I want to pull in a remote
> > authentication system.
>
> You can have ext
On Jul 30, 6:43 am, Alexandre Andrade
wrote:
> I can't find how translate the h2 title of auth pages, so I can't
> translate “register”, “login” and “retrieve password “
> Look it is generated in code, note in layouts.
It is in the view: user.html
However it is not Internationalisable as-is:
{{
Just for reference, even though I was the one who noted that mitsuhiko
was Armin (which is written on his public blog), I am not one of the
supposed people who emailed or stalked him.
On Jul 30, 1:01 am, mdipierro wrote:
> To web2py users.
>
> Please do not stalk Armin. He is a talented develope
Nobody did. This is fine. Nothing bad happened.
Massimo
On Jul 30, 3:56 am, Bottiger wrote:
> Just for reference, even though I was the one who noted that mitsuhiko
> was Armin (which is written on his public blog), I am not one of the
> supposed people who emailed or stalked him.
>
> On Jul 30
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Thanks, it works.. :)
D.
> auth.settings.registration_requires_verification = True
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkpxZVAACgkQ3oCkkciamVHU8g
In my model I defined the following table:
db.define_table('level',
db.Field('level',length=36,default='',notnull=True,unique=True),
db.Field('image',type='upload'),
migrate='level.table')
db.level.level.requires=[IS_LENGTH(36,error_message='lengte
overschreidt 36 tekens'),IS_NOT_EMP
On Jul 30, 10:21 am, annet wrote:
> db.define_table('level',
> db.Field('level',length=36,default='',notnull=True,unique=True),
> fields[fieldname] = field.store(source_file, original_filename)
> AttributeError: 'SQLField' object has no attribute 'store'
Looks to me like it's confused b
thanks for the suggestion
this is what iam trying to achieve
db
(db.material_issue.product_id==created_temporary_table.product_id).select
(db.material_issue.product_id,created_temporary_table.name,db.material_issue.issued_qty)
On Jul 29, 11:21 am, Fran wrote:
> On Jul 29, 3:14 pm, phneoix wr
http://my-sticky-note.appspot.com/init/default/welcome (still missing
the demo)
Yes it's very small app, never-the-less the time went like this:
- views / controllers / model: 5% (or less)
- javascript / css: 95%
I encountered only one small problem - some of the aith.messages do
not appear in
On Jul 30, 8:39 am, mdipierro wrote:
> How do we get it logged?
I just set up this script:
http://inamidst.com/code/loggy.py
to log here:
http://logs.sahanapy.org/web2py
F
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google G
Thank you Miguel but I found out that the problem is with my swf file.
It is originally an mp4 file, I tried to convert it with Flash CS4 but
any options I choose seems not working when I call the file form my
web2py view.
When I right click the swf exported by Flash and choose open with
Firefox
hi Fran,
Have looked at {{=form.custom.begin}} and it looks just the ticket. It
enables me to have one User table (which I've modified in db.py with
additional fields) and then have two views: one for each type of user.
I've one last sticking point...
Now I'm no longer using {{=form}} I don't g
Hi,
I wonder if anyone could help, I've been battling with this for hours.
What I thought was going to be fairly straightforward has become very
time consuming.
I've got web2py setup as a wsgi, and I want to rewrite URLs using
Apache's mod_rewrite (I did try doing it via routes.py in web2py but
Hi friends,
I have this case:
# Model
SQLField('aceita','string', default='Sim'))
db.pampa_classificacaocliente.aceita.requires=[IS_NOT_EMPTY(),
IS_IN_SET(['Sim', 'Não'])]
# Controller
form=SQLFORM(db.pampa_classificacaocliente,rows[0],fie
Very cool! I liked it! :)
On Thu, Jul 30, 2009 at 7:23 AM, Vidul Petrov wrote:
>
> http://my-sticky-note.appspot.com/init/default/welcome (still missing
> the demo)
>
> Yes it's very small app, never-the-less the time went like this:
> - views / controllers / model: 5% (or less)
> - javascript
On Jul 30, 1:33 pm, LB22 wrote:
> I'm not sure in which directory I should be putting the .htaccess
> file.
Can't you put it in httpd.conf?
e.g. on Ubuntu in /etc/apache2/sites-available/mysite
or on RedHat:
/etc/httpd/conf.d/mysite
F
--~--~-~--~~~---~--~~
You re
On Jul 30, 2:00 pm, Leandro - ProfessionalIT
wrote:
> db.pampa_classificacaocliente.aceita.requires=[IS_NOT_EMPTY(),
> IS_IN_SET(['Sim', 'Não'])]
> Well, in the view the field 'aceita' output is a input text and not
> a SimNão field. How
> to implements this ?
db.pampa_classificacaocli
Hi.
IS_IN_SET works alone, not in combination with other validators.
Anyway IS_NOT_EMPTY is not required because the field must have one of the
values given in IS_IN_SET.
try:
db.pampa_classificacaocliente.aceita.requires=IS_IN_SET(['Sim', 'Não'])
regards
mmlado
On Thursday 30 July 2009 15:00
Well, I did see this alluded to in some forums, but honestly, I'm
quite the novice when it comes to server configuration so I'm don't
know what really needs to be. Would I just include the rewrite rule in
the httpd.conf file as I've written it above? What's the best way to
achieve my goal?
On Jul
Perfect !,
Thanks masters.
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"web2py-users" group.
To post to this group, send email to web2py@googlegroups.com
To unsubscribe from this group, send email to
web2py+unsub
On Jul 30, 2:26 pm, LB22 wrote:
> Well, I did see this alluded to in some forums, but honestly, I'm
> quite the novice when it comes to server configuration so I'm don't
> know what really needs to be. Would I just include the rewrite rule in
> the httpd.conf file
Yes
> as I've written it above
There are many good systems to log and allow searches over
conversations/nicks/dates on IRC.
I would suggest to check this one called "Arkivo": http://irclog.turbogears.org/
On Jul 30, 11:46 am, Fran wrote:
> On Jul 30, 8:39 am, mdipierro wrote:
>
> > How do we get it logged?
>
> I just set up
I am trying to execute upload a xml parser into my application and
parse it on the fly and insert the data into a database which is
connected to the web2py.
I have already written a program to upload the xml file and the
files (which are desribed in the xml) seperately.
Can somebody give me so
It works.
Thanks, Fran !
2009/7/30 Fran
>
> On Jul 30, 6:43 am, Alexandre Andrade
> wrote:
> > I can't find how translate the h2 title of auth pages, so I can't
> > translate “register”, “login” and “retrieve password “
> > Look it is generated in code, note in layouts.
>
> It is in the view
On Jul 30, 2009, at 5:33 AM, LB22 wrote:
> I've got web2py setup as a wsgi, and I want to rewrite URLs using
> Apache's mod_rewrite (I did try doing it via routes.py in web2py but
> consistently got errors with even the simplest routes_in/out).
I struggled a bit with routes.py myself, and abando
I'm enforcing CRUD auth and I can use the select function without login...
is that expected?
Thanks,
Tito
--
Linux User #387870
.
_/_õ|__|
..º[ .-.___.-._| . . . .
.__( o)__( o).:___
--~--~-~--~~~---~--~~
You received this message because y
On Jul 30, 2009, at 5:33 AM, LB22 wrote:
> Below is what I'm trying to achieve, followed by the rules I put in
> my .htaccess file. Could someone please tell me where I'm going wrong,
> and in which directory I need to put the .htaccess file? Mod_rewrite
> is definitely enabled, but is there anyt
On Jul 30, 2009, at 1:29 AM, Carl wrote:
>
> Fran - thanks. that's great. C
I keep seeing great tips like this fly past on the mailing list. I try
to mark them, but it emphasizes how useful it would be to be able to
accumulate knowledge in a ... knowledge base. I know that's not a new
sugg
On Thu, Jul 30, 2009 at 12:18 PM, carlo wrote:
>
> Thank you Miguel but I found out that the problem is with my swf file.
> It is originally an mp4 file, I tried to convert it with Flash CS4 but
> any options I choose seems not working when I call the file form my
> web2py view.
If its in swf, it
On Jul 30, 2009, at 7:42 AM, Miguel Lopes wrote:
> If its in swf, it should work.
>
> Although, I notice an error in the original snippet you posted
> (besides the missing ' ):
> {{url=URL(r=request,c='static',f='somefilename.swf)}}
>
> Should be):
> url={{URL(r=request,c='static',f='somefilename
Hi,
Thanks Jonathan, I'll take another look at the server log and see if I
find any clues.
On Jul 30, 3:15 pm, Jonathan Lundell wrote:
> On Jul 30, 2009, at 5:33 AM, LB22 wrote:
>
>
>
>
>
> > Below is what I'm trying to achieve, followed by the rules I put in
> > my .htaccess file. Could someon
I appreciate the responses Fran, but I don't, I still feel like
there's something crucial missing here, something that I'm missing.
I'm sure it shouldn't be this difficult (I have done simple domain
redirects in the past). It would be a lot easier if I could routes.py
url rewrites to work as I exp
On Jul 30, 2009, at 8:05 AM, LB22 wrote:
>
> Hi,
>
> Thanks Jonathan, I'll take another look at the server log and see if I
> find any clues.
The main trick is to get *some* kind of pattern match. If your match
pattern never matches, the log won't be helpful, since the rewrite
line will be a
On Jul 30, 2009, at 8:02 AM, LB22 wrote:
> I appreciate the responses Fran, but I don't, I still feel like
> there's something crucial missing here, something that I'm missing.
> I'm sure it shouldn't be this difficult (I have done simple domain
> redirects in the past). It would be a lot easier
It looks to me you have a new version of globals.py but an old version
of sql.py. Is this possible?
Massimo
On Jul 30, 4:21 am, annet wrote:
> In my model I defined the following table:
>
> db.define_table('level',
> db.Field('level',length=36,default='',notnull=True,unique=True),
> db.
The best you can do is create a dictionary
d={1:'name1', 2:'name2', 3:'name3'} #where 1,2,3 are id in tmp table
db(db.material_issue.product_id.belongs(d.keys())).select
(db.material_issue.product_id,db.material_issue.issued_qty)
for row in rows:
print row.product_id, d[row.product_id], row
Very cool indeed! Congratulations. Perhaps you should add more
contract to the text, I find it hard to read, bur perhaps it is just
me.
Massimo
On Jul 30, 8:05 am, Tito Garrido wrote:
> Very cool! I liked it! :)
>
>
>
> On Thu, Jul 30, 2009 at 7:23 AM, Vidul Petrov wrote:
>
> > http://my-stick
would you be able to take care of this for the web2py IRC?
On Jul 30, 5:46 am, Fran wrote:
> On Jul 30, 8:39 am, mdipierro wrote:
>
> > How do we get it logged?
>
> I just set up this script:http://inamidst.com/code/loggy.py
>
> to log here:http://logs.sahanapy.org/web2py
>
> F
--~--~-~
Is you problem parsing the xml data?
I am not expert but Python comes with this parser:
http://docs.python.org/library/xml.sax.html
massimo
On Jul 30, 8:49 am, max wrote:
> I am trying to execute upload a xml parser into my application and
> parse it on the fly and insert the data into a datab
For now, you can post an entry on AlterEgo, although I believe there
is already one on the topic.
We also have the wiki: https://web2py.com/wiki
although I have not seen much activity there. Perhaps it is my fault.
If anybody wants to setup a better wiki, I will link it.
Massimo
On Jul 30, 9:1
Is it possible it wants the full URL?
{{url=URL(r=request,c='static',f='somefilename.swf)}}
http://whereveryouare.com{{=url}}"; width="550"
height="400">
On Jul 28, 10:48 am, carlo wrote:
> After several tries I have to ask: are any particular issues with
> embedding flash objects in views?
On Jul 30, 2009, at 7:47 AM, Jonathan Lundell wrote:
>
> On Jul 30, 2009, at 7:42 AM, Miguel Lopes wrote:
>
>> If its in swf, it should work.
>>
>> Although, I notice an error in the original snippet you posted
>> (besides the missing ' ):
>> {{url=URL(r=request,c='static',f='somefilename.swf)}}
On Jul 30, 2009, at 8:52 AM, mdipierro wrote:
>
> For now, you can post an entry on AlterEgo, although I believe there
> is already one on the topic.
I've been sort of frustrated by AlterEgo, but maybe I don't know how
to use it. Is the "question" form a general search? If I enter 'auth',
I
AlterEgo only searcher by words in the title. I will add dates
On Jul 30, 11:03 am, Jonathan Lundell wrote:
> On Jul 30, 2009, at 8:52 AM, mdipierro wrote:
>
>
>
> > For now, you can post an entry on AlterEgo, although I believe there
> > is already one on the topic.
>
> I've been sort of frustr
On Jul 30, 4:48 pm, mdipierro wrote:
> would you be able to take care of this for the web2py IRC?
I'm happy to leave this one up & running.
I don't fancy installing TurboGears/Arkivo to make it super-fancy.
If anyone else has simpler ideas to make it output something nicer,
then I'm happy to ins
On the select code there is a attr parameter...
def select(
self,
table,
query=None,
fields=None,
orderby=None,
limitby=None,
headers={},
**attr
):
request = self.environment.request
if not (isinstance(tabl
On Jul 30, 7:17 pm, Tito Garrido wrote:
> On the select code there is a attr parameter...
> How can I set it though GET variables?
Parse in your controller:
def myselect():
linkto = request.vars['linkto']
db(query).select(linkto=linkto)
F
--~--~-~--~~~---~--
Thank you!
You are right, the constrast of the text will be improved.
On Jul 30, 6:47 pm, mdipierro wrote:
> Very cool indeed! Congratulations. Perhaps you should add more
> contract to the text, I find it hard to read, bur perhaps it is just
> me.
>
> Massimo
>
> On Jul 30, 8:05 am, Tito Garri
This code is the select function from CRUD...
this code that you put here is to get the variable... ok... I know that...
What I want to know is how to set the linkto parameter on /data/select since
it get's it from **attr parameter:
*def select(*
self,
table,
query=Non
OK, another question regarding routes.py (since I've started fiddling
with it again)...
Is it possible to temporarily store a value passed to a function, then
use that value in the rewrite? I'm trying to get it working but
haven't got it right yet. Example:
routes_in=(
('/value' , '/rewritten/pa
Sorry, please disregard the above question...
Thanks you Fran for the help with apache mod_rewrite, and thank you
Jonathan for your help on with that and routes.py. Much
appreciated. :o)
On Jul 30, 8:19 pm, LB22 wrote:
> OK, another question regarding routes.py (since I've started fiddling
> wi
OK, so I have a new question.
After all of the above I was experimenting this afternoon with masking
urls (not for anything dodgy, I assure you). I'm wondering though, why
does the below provide the work as designed on my local machine
("localhost"), but not work when on the remote server?
rout
On Jul 30, 2009, at 12:56 PM, LB22 wrote:
> After all of the above I was experimenting this afternoon with masking
> urls (not for anything dodgy, I assure you). I'm wondering though, why
> does the below provide the work as designed on my local machine
> ("localhost"), but not work when on the
Hi,
LB22 wrote:
> Thanks Jonathan, I'll take another look at the server log and see if I
> find any clues.
>
Is the rewrite rule within a virtual host block?
I've mistaken vhost probs for regex probs in the past - wrong vhost,
wrong regex...
Just a shot in the dark!
--
Regards,
PhilK
Em
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello,
if I have
IS_NULL_OR(IS_IMAGE(maxsize=(5000,4000), minsize=(50,50),
extensions=('jpeg', 'png', 'gif')))
as a field validator, the form.accepts with no image to upload causes:
File "/web2py/gluon/sqlhtml.py", line 802, in accepts
(source
On Jul 30, 2009, at 1:22 PM, LB22 wrote:
>
> Use a named buffer... I'm not sure what you mean. Could you give me an
> example of how I could rewrite my code in a more prudent way? My way
> clearly isn't prudent or I wouldn't end with 500 internal server
> errors ;o)
Rather than this:
routes_in=
can you be more specific?
On Thu, Jul 30, 2009 at 9:12 AM, Tito Garrido wrote:
> I'm enforcing CRUD auth and I can use the select function without login...
> is that expected?
>
> Thanks,
>
> Tito
>
> --
>
> Linux User #387870
> .
> _/_õ|__|
> ..º[ .-.___.-._| . . . .
> .__( o)
Use a named buffer... I'm not sure what you mean. Could you give me an
example of how I could rewrite my code in a more prudent way? My way
clearly isn't prudent or I wouldn't end with 500 internal server
errors ;o)
Thanks
On Jul 30, 9:15 pm, Jonathan Lundell wrote:
> On Jul 30, 2009, at 12:56
I've enforced auth on crud:
crud.settings.auth=auth
And I can access myserver/controller/data/select/TABLE without need to
login... I can't access other functions like create, delete, update... but I
can access select function
On Thu, Jul 30, 2009 at 5:32 PM, Yarko Tymciurak wrote:
> can you be
Great Fran; thanks;
Massimo: do you want to link the web2py IRC logs on
http://logs.sahanapy.org/web2py
so people can find them?
Also - can we setup something so that registered nicks are required on
web2py IRC?
Does anyone know how to set that up?
On Thu, Jul 30, 2009 at 12:56 PM, Fran wrote
OK, so that seemed to make sense, and I tried it, but still got 500
errors. Looking at the log, it's apparently being caused by invalid
syntax:
ERROR: root:Your routes.py has a syntax error. Please fix it before
you restart web2py
...Target WSGI script '/.../apachewsgi_2/web2py/wsgihandler.py' ca
On Thu, Jul 30, 2009 at 4:58 PM, Jonathan Lundell wrote:
>
> On Jul 30, 2009, at 7:47 AM, Jonathan Lundell wrote:
>
>> On Jul 30, 2009, at 7:42 AM, Miguel Lopes wrote:
>>
>>> If its in swf, it should work.
>>>
>>> Although, I notice an error in the original snippet you posted
>>> (besides the miss
On Fri, Jul 31, 2009 at 1:21 AM, Miguel Lopes wrote:
> On Thu, Jul 30, 2009 at 4:58 PM, Jonathan Lundell wrote:
>>
>> On Jul 30, 2009, at 7:47 AM, Jonathan Lundell wrote:
>>
>>> On Jul 30, 2009, at 7:42 AM, Miguel Lopes wrote:
>>>
If its in swf, it should work.
Although, I notice an
On Jul 30, 2009, at 5:21 PM, Miguel Lopes wrote:
>
> On Thu, Jul 30, 2009 at 4:58 PM, Jonathan
> Lundell wrote:
>>
>> On Jul 30, 2009, at 7:47 AM, Jonathan Lundell wrote:
>>
>>> On Jul 30, 2009, at 7:42 AM, Miguel Lopes wrote:
>>>
If its in swf, it should work.
Although, I notice
Hi All
I have just noticed that the google code page with the bug tracker has some
old bugs (more than one month old).
Is Web2Py still using the google bug tracking system ?
thanks
On Wed, Jul 29, 2009 at 12:36 PM, Sebastian E. Ovide <
sebastianov...@gmail.com> wrote:
> great..
>
> you need to
I will take a look.
On Jul 30, 3:38 pm, Tito Garrido wrote:
> I've enforced auth on crud:
> crud.settings.auth=auth
>
> And I can access myserver/controller/data/select/TABLE without need to
> login... I can't access other functions like create, delete, update... but I
> can access select functi
I will take a look.
On Jul 30, 3:38 pm, Tito Garrido wrote:
> I've enforced auth on crud:
> crud.settings.auth=auth
>
> And I can access myserver/controller/data/select/TABLE without need to
> login... I can't access other functions like create, delete, update... but I
> can access select functi
I will link them on the main web page. tomorrow. I am flying today.
On Jul 30, 3:40 pm, Yarko Tymciurak wrote:
> Great Fran; thanks;
>
> Massimo: do you want to link the web2py IRC logs
> onhttp://logs.sahanapy.org/web2py
>
> so people can find them?
>
> Also - can we setup something so that r
can you post your routes.py? as an attachment plaese.
On Jul 30, 5:02 pm, LB22 wrote:
> OK, so that seemed to make sense, and I tried it, but still got 500
> errors. Looking at the log, it's apparently being caused by invalid
> syntax:
>
> ERROR: root:Your routes.py has a syntax error. Please fi
The CRYPT validator is unsecure because it uses unsalted MD5.
There are public rainbow tables that have unsalted MD5 passwords of up
to 10 characters long including symbols.
I highly recommend that if no "key" is specified, that CRYPT will
automatically salt the password based on a substring of
We cannot break backward compatibility. People should specify a key
and use the HMAC+SHA512 anyway.
Massimo
On Jul 30, 9:49 pm, Bottiger wrote:
> The CRYPT validator is unsecure because it uses unsalted MD5.
>
> There are public rainbow tables that have unsalted MD5 passwords of up
> to 10 char
OK, I don't know how but I missed Philip's post earlier:
"Is the rewrite rule within a virtual host block?"
This was exactly the problem - where I was trying Fran's suggestion
for my mod_rewrite issues, I had added a rewrite rule to a virtual
hosts block in httpd.conf, but forgotten to remove it
I know you have the mantra of not breaking backwards compatibility,
but it is a pretty bad idea to have unsalted MD5 passwords.
For example, let's say your password is "massimo". The MD5 hash of
that happens to be "8cac5ac44b51f182143a43c4cdb6c4ac".
Even forgetting rainbow tables, you can simply
Hi,
I'm using "response.stream(file_name)" method to offer users downloading
files which are sort of business-classified, but the downloading process
always terminated halfway. The testing file is 4.2M, an Excel workbook.
Is there anything I can do with system configuration(CherryPy), or it's
just
On Jul 30, 2009, at 8:30 PM, Bottiger wrote:
>
> I know you have the mantra of not breaking backwards compatibility,
> but it is a pretty bad idea to have unsalted MD5 passwords.
>
> For example, let's say your password is "massimo". The MD5 hash of
> that happens to be "8cac5ac44b51f182143a43c4c
I believe this is a cherrypy issue; Can you use apache + mod_wsgi instead?
This is more reliable for serious work.
On Thu, Jul 30, 2009 at 10:32 PM, 陶艺夫 wrote:
> Hi,
> I'm using "response.stream(file_name)" method to offer users downloading
> files which are sort of business-classified, but the
As long as the salt is different for every password, it pretty much
makes it infeasible for someone to create a large enough rainbow hash
table attack.
The Unix salt of 12 random bytes is ok, but comes at the cost of extra
storage and pretty much the same benefit. To put a larger barrier on
compu
On Jul 30, 2009, at 9:16 PM, Bottiger wrote:
>
> As long as the salt is different for every password, it pretty much
> makes it infeasible for someone to create a large enough rainbow hash
> table attack.
Different but predictable.
> hash = md5(password+password[-1])
is easy to make a rainbow
you can already do CRYPT(digest_alg='sha512') or any other OpenSSL
supported algorithm.
but yes... there should be a good balance between all relevant values
for web2py project, I mean, a solid name on security is at least as
important as an extreme "backward compatibility" record (if this is
rea
On Jul 31, 5:16 am, Bottiger wrote:
> As long as the salt is different for every password, it pretty much
> makes it infeasible for someone to create a large enough rainbow hash
> table attack.
>
> The Unix salt of 12 random bytes is ok, but comes at the cost of extra
> storage and pretty much
> That may not be a good idea, I think. That makes your password longer but
> with a possible cryptographic weakness because it's following a known
> generation rule (being formed by a string repeated 3 times).
The primary concern is a precomputed rainbow hash table.
Anything related to passwo
On Jul 30, 2009, at 10:26 PM, Bottiger wrote:
>
>> That may not be a good idea, I think. That makes your password
>> longer but with a possible cryptographic weakness because it's
>> following a known generation rule (being formed by a string
>> repeated 3 times).
>
> The primary concern is
> Precomputing the possible hashes for each base password requires a table of
> 2^60 hashes *per password*. On the other hand, a hash of a
single deterministic transform of each password requires one hash per
password.
I don't think you are understanding the situation, and I am getting a
bit tir
> Dictionary attacks work for short
> passwords, but are impractical against longer passwords. A password
> using letters, numbers and a few special characters carries in excess
> of 6 bits of information per character. 10 bytes of password plus 10
> bytes of random salt gives us 120 bits total, f
On Friday 31 July 2009 10:32:23 Bottiger wrote:
> > Precomputing the possible hashes for each base password requires a table
> > of 2^60 hashes *per password*. On the other hand, a hash of a
> > single deterministic transform of each password requires one hash per
> > password.
>
> I don't think y
On Jul 30, 2009, at 11:32 PM, Bottiger wrote:
>
>> Precomputing the possible hashes for each base password requires a
>> table of 2^60 hashes *per password*. On the other hand, a hash of a
> single deterministic transform of each password requires one hash per
> password.
>
> I don't think you
On Jul 30, 2009, at 11:43 PM, Bottiger wrote:
>> Dictionary attacks work for short
>> passwords, but are impractical against longer passwords. A password
>> using letters, numbers and a few special characters carries in excess
>> of 6 bits of information per character. 10 bytes of password plus 1
95 matches
Mail list logo