[issue14367] try/except block in ismethoddescriptor() in inspect.py, so that pydoc works with pygame in Python 3.2

2019-06-06 Thread Rene Dudfield
Rene Dudfield added the comment: This can be closed. $ python3 -m pydoc -p 7464 Then view in browser: http://localhost:7464/pygame.html No error. -- nosy: +illume ___ Python tracker <https://bugs.python.org/issue14

[issue11685] possible SQL injection into db APIs via table names... sqlite3

2012-05-29 Thread Rene Dudfield
Rene Dudfield added the comment: Hi, Here is an article with people trying to find a solution: http://stackoverflow.com/questions/6514274/how-do-you-escape-strings-for-sqlite-table-column-names-in-python "The psycopg2 documentation explicitly recommends using normal python % or {} forma

[issue12944] setup.py upload to pypi needs to work with specified files

2011-09-08 Thread Rene Dudfield
New submission from Rene Dudfield : We need to specify files to upload to pypi. Otherwise we have to use the web interface. 'Regarding the "setup.py upload" command, this isn't very helpful because it will not upload a package that was already built - for example, a Windo

[issue11685] possible SQL injection into db APIs via table names... sqlite3

2011-03-27 Thread Rene Dudfield
Rene Dudfield added the comment: Hi, aaah, ok. It seems to require the use of a quote function. See http://www.sqlite.org/c3ref/mprintf.html However python does not seem to expose the function? I don't see how you can write safe queries using python witho

[issue11685] possible SQL injection into db APIs via table names... sqlite3

2011-03-26 Thread Rene Dudfield
Rene Dudfield added the comment: The bug in python is that you can not use parameter substitution to put the table names into the queries. So people are forced to use string substitution instead. -- ___ Python tracker <http://bugs.python.

[issue11685] possible SQL injection into db APIs via table names... sqlite3

2011-03-26 Thread Rene Dudfield
Rene Dudfield added the comment: Hello, because the sqlite3 package comes with python. -- ___ Python tracker <http://bugs.python.org/issue11685> ___ ___ Pytho

[issue11685] possible SQL injection into db APIs via table names... sqlite3

2011-03-26 Thread Rene Dudfield
New submission from Rene Dudfield : Hi, you can possibly do an SQL injection via table names (and maybe some other parts of queries). Tested with sqlite3, but maybe it affects others too. You can not do parameter substitution for table names, so people use normal python string formatting

[issue7677] distutils, better error message for setup.py upload -sign without identity.

2010-01-11 Thread Rene Dudfield
New submission from Rene Dudfield : hi, When using setup.py upload --sign without --identity, gpg can give weird messages. Rather than this error message: """running upload gpg --detach-sign --local-user gn -a dist/pywebsite-0.1.18pre.tar.gz gpg: skipped "gn": sec

[issue7412] distutils install race condition

2009-12-31 Thread Rene Dudfield
Rene Dudfield added the comment: Hi Tarek, moving a package into place right at the end is the best thing to do I think. It solves a couple common problems: - broken packages after an install is stopped half way for one of many common reasons. - old files left around will not be

[issue7412] distutils install race condition

2009-11-30 Thread Rene Dudfield
New submission from Rene Dudfield : hello! Pythons distutils has a race condition where it starts to copy files into the python path whilst installing. This is a race condition, since python programs can be importing the package whilst the package is being installed. It would be good for

[issue2399] Patches for Tools/msi

2009-11-10 Thread Rene Dudfield
Rene Dudfield added the comment: Adding distutils to components for this old msi patch. These seem like useful things for those making msi packages with distutils. -- components: +Distutils nosy: +illume ___ Python tracker <http://bugs.python.

[issue6269] threading documentation makes no mention of the GIL

2009-09-22 Thread Rene Dudfield
Rene Dudfield added the comment: hello, CPU intensive programs can also benefit from the GIL if they use code which releases the GIL around the CPU intensive parts. Some parts of python do this, as do the numpy and pygame extensions amongst others. Another good, but separate, documentation

[issue6968] numpy extensions to distutils... are a source of improvements for distutils

2009-09-22 Thread Rene Dudfield
New submission from Rene Dudfield : Hi, numpy includes a numpy/distutils package which has a lot of goodies/fixes which might be able to be incorporated into the main distutils. Adding this note so distutils maintainers are aware of it. cheers, -- assignee: tarek components

[issue6964] import new fails

2009-09-22 Thread Rene Dudfield
Rene Dudfield added the comment: Hi, yes it does report a warning with 2.6, thanks. python2.6 -3 -c "import new" -c:1: DeprecationWarning: The 'new' module has been removed in Python 3.0; use the 'types' module instead. I guess it should be

[issue6964] import new fails

2009-09-22 Thread Rene Dudfield
New submission from Rene Dudfield : python3.1 >>> import new Traceback (most recent call last): File "", line 1, in ImportError: No module named new 2to3-3.1 doesn't mention how to change it. -- components: 2to3 (2.x to 3.0 conversion tool) messages: 929

[issue2751] Regression for executing packages

2009-07-09 Thread Rene Dudfield
Rene Dudfield added the comment: hello, thanks for the explanation of why it's that way. Any ideas of a work around? python2.5 has been out for ages now. Even if it was an accident, it's the behavior people expect, and it's still a regression. Also, why should it matter i

[issue2751] Regression for executing packages

2009-07-09 Thread Rene Dudfield
Rene Dudfield added the comment: Hi, note -m on packages still works with python3.0 and python3.1. It works by allowing a __main__.py file that gets called by -m. This is a really annoying regression for python2.6. It's a fairly wide spread feature too. I can't see any PEP fo

[issue5342] distutils removing old files, deleting unneeded old files from installed location.

2009-02-21 Thread Rene Dudfield
New submission from Rene Dudfield : A common problem is removing old files from the installed location. eg. version 1 installs. site-packages/packagename/bla.so version 2 installs. site-packages/packagename/_bla.so site-packages/packagename/bla.py However, in version 2 if we install over the