Re: [Zope] Multiple CookieCrumblers

2006-01-12 Thread Jens Vagelpohl
On 12 Jan 2006, at 00:39, Brian Sullivan wrote: I will not do what you expect to do. The first cookie crumbler to do authentication sets the cookie and even if other cookie crumblers get involved they will not just overwrite that cookie because the lifetime setting on their cookie is different.

[Zope] css not working in rewrite

2006-01-12 Thread Kedar Dash
Dear All, I am using python 2.3.5, zope 2.8 and plone 2.1. After writing the following rewrite rule in apache (compiled from source 1.3) the site is opening. ServerAlias shakeelx.ekduniya.com RewriteEngine On RewriteRule ^/(.*) http://127.0.0.1:9673/VirtualHostBase/http/% {HTTP_HOST

Re: [Zope] Multiple CookieCrumblers

2006-01-12 Thread Brian Sullivan
On 1/12/06, Jens Vagelpohl <[EMAIL PROTECTED]> wrote: > I don't know what you're talking about, the CookieCrumbler has > *nothing* to do with caching at all. Are you confusing tools here? > Could it be you're talking about the CachingPolicyManager? AFAIK CookieCrumbler sets the http cache control

Re: [Zope] Multiple CookieCrumblers

2006-01-12 Thread Brian Sullivan
On 1/11/06, David Hassalevris <[EMAIL PROTECTED]> wrote: > Can you explain how you are using this? I am not sure what "this" you are referring to. If you mean controlling the cache control http response that is done by setting a property in the CookieCrumbler object. > Does cookie crumbler's > c

[Zope] wrong directoy in Control_Panel.Products.XXXX.home

2006-01-12 Thread Luca Olivetti
A while ago I changed the directory of my zope instance. I also changed the zope directory (started with zope 2.8.1, now running 2.8.4). Today I noticed that the CMFQuickInstaller failed to get the version and the readme of various products. It happens that CMFQuickInstaller uses Control_Panel.

[Zope] Zope Security

2006-01-12 Thread michael nt milne
HiJust a quick query about Zope security etc. I've got an installation on a Windows server using Apache, which also hosts internal email/data etc. This is behind a router/firewall. Just wondering if there are any Zope security issues that I should be aware of? How secure is Zope? ThanksMichaelPS Th

Re: [Zope] css not working in rewrite

2006-01-12 Thread Tino Wildenhain
Kedar Dash schrieb: > Dear All, > > I am using python 2.3.5, zope 2.8 and plone 2.1. > > After writing the following rewrite rule in apache (compiled from > source 1.3) the site is opening. > > > ServerAlias shakeelx.ekduniya.com ServerName seems missing. > RewriteEngine On > Rewrit

Re: [Zope] Handling login failures

2006-01-12 Thread Håkan Johansson
On Jan 11, 2006, at 17:37, Tino Wildenhain wrote: Håkan Johansson schrieb: Hi everyone. I want to be able to block a user from logging in if he fails to give the right login/password three times in a row. The problem is that I don't know how to do this. Because it isnt really possible/prac

Re: [Zope] wrong directoy in Control_Panel.Products.XXXX.home

2006-01-12 Thread Martijn Pieters
On 1/12/06, Luca Olivetti <[EMAIL PROTECTED]> wrote: > Everything has been working fine (apart for the breakage of > CMFQuickInstaller) but I wonder if this is the intended behavior and if > there is better way to update the information in Control_Panel (touching > __init__.py in the offending prod

[Zope] Re: Zope Security

2006-01-12 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 michael nt milne wrote: > Hi > > Just a quick query about Zope security etc. I've got an installation on a > Windows server using Apache, which also hosts internal email/data etc. This > is behind a router/firewall. Just wondering if there are any Zop

[Zope] Re: Zope Security

2006-01-12 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I wrote: > I would rate Zope overall as a reasonably secure platform. Because the > builk of it, including all the socket handling code, is written in > If you look > at the list of security alerts ("hotfixes", see > > you will note that the *vast*

[Zope] problems displaying radio buttons in plone

2006-01-12 Thread Jon Savian
Hi guys, i am using plone 2.1.3 and i am having some trouble displaying radio buttons. I am doing a normal html form etc However they do not display on the page. Any ideas? Thanx ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/li

Re: [Zope] cannot create an external method with zope-2.9.0

2006-01-12 Thread Joachim Schmitz
I found the problem: it was a typo !! during checkout of the Product I made a typo and named the Product-directory WAeUp instead WAeUP :-(((. Sorry for the noise. Patrick Decat schrieb: On 1/11/06, joachim <[EMAIL PROTECTED]> wrote: Yes it is called Extensions, but is in the Product.

Re: [Zope] problems displaying radio buttons in plone

2006-01-12 Thread J Cameron Cooper
Jon Savian wrote: Hi guys, i am using plone 2.1.3 and i am having some trouble displaying radio buttons. I am doing a normal html form etc However they do not display on the page. Any ideas? What do you mean by "doing"? Plone doesn't by default allow things like forms in content. There

[Zope] Zope background variables

2006-01-12 Thread Alric Aneron
Hello, I was wondering if there is a way to store a global variable on the server, and have such variable be easily retrieved in Zope dtml/python methods. I want to make my own login system with sessions.  And store session ID on the server and cookie to identify logged in users. Is there an easy w

Re: [Zope] Zope background variables

2006-01-12 Thread Jonathan
You should have a look at 'temp_folder'.  It is a ram-based folder (ie. objects stored in it are not written to the ZODB), so when zope stops running anything in the temp_folder is lost, but it is faster than writing to the ZODB (disk-based storage).  Zope uses a temp_folder for its sessions

[Zope] Re: Handling login failures

2006-01-12 Thread Florent Guillaume
Håkan Johansson wrote: I want to be able to block a user from logging in if he fails to give the right login/password three times in a row. You're aware that this allows anyone to trivially DoS your users, right? If you take the precaution of matching with the IP, it still will harm people lo

Re: [Zope] Re: Handling login failures

2006-01-12 Thread Dennis Allison
A more usual solution to this issue is to insert a delay after the third and subsequent failures. You, of course, need a policy for removing the delay (successful login or N minutes following the last attempt). On Fri, 13 Jan 2006, Florent Guillaume wrote: > Håkan Johansson wrote: > > I want

[Zope] Re: Handling login failures

2006-01-12 Thread Håkan Johansson
On Jan 13, 2006, at 00:24, Florent Guillaume wrote: Håkan Johansson wrote: I want to be able to block a user from logging in if he fails to give the right login/password three times in a row. You're aware that this allows anyone to trivially DoS your users, right? If you take the precauti

Re: [Zope] Re: Handling login failures

2006-01-12 Thread Håkan Johansson
On Jan 13, 2006, at 00:32, Dennis Allison wrote: A more usual solution to this issue is to insert a delay after the third and subsequent failures. You, of course, need a policy for removing the delay (successful login or N minutes following the last attempt). Yes, I have been thinkin