Fran,
> because that is what is stored in the DB.
>
> To display the image you need something like:
>
>
>
Problem solved, thanks.
Kind regards,
Annet.
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"web2py-user
Take a look here:
http://wiki.dreamhost.com/Web2py
On Sun, Aug 2, 2009 at 11:55 PM, Pynthon wrote:
>
> Ok, I looked on Web2Py AlterGo but I cannot find anything about it :(.
> Does someone has a tutorial how to install web2py with FastCGI?
>
> On 2 aug, 17:44, mdipierro wrote:
>> use FastCGI, CG
I haven't had time to verify the other findings, but there are
definitely file handle leakages. I can never delete an application if
I just visited it once.
On Aug 2, 12:21 pm, mdipierro wrote:
> I am about to catch a plane so I will be short. We can talk more about
> this in a couple of days.
>
On Aug 2, 2009, at 3:10 PM, Jonathan Lundell wrote:
> On Aug 1, 2009, at 9:48 AM, mdipierro wrote:
>
>> Mind that none of this has anything to do with the ability of an
>> attacker to guess the passwords to access a web2py site. This is
>> about
>> protecting the users form the administrators w
Alright, this quetion seems like it should have an easy answer and I'm
just missing something. Currently IS_IN_DB is rendered as a drop down
box. What I would like to do is have the user be able to type in an
identification number (which as you can guess is not very easy to find
in a dropdown or a
On Aug 1, 2009, at 9:48 AM, mdipierro wrote:
> Mind that none of this has anything to do with the ability of an
> attacker to guess the passwords to access a web2py site. This is about
> protecting the users form the administrators who may decrypt their
> hashed passords and access the users's ac
i hid the field in the table because it's a foreign key that the user
shouldn't adjust. for example, say the user has clicked on a category
and is adding an item. the db looks like this:
category: bunch of fields
item: id, categoryid, name, bunch of fields
so when they click on "category 1", it
Really bizarre this as my simple testcases work fine.
However r1044 works with my app whereas 1045 doesn't
Traceback: http://paste.pocoo.org/show/132219/
sqlhtml line 809 was changed in this revision.
The app code can be found in:
Model:
http://bazaar.launchpad.net/~flavour/sahana/sahanapy-trunk
I assume those fields corresponds to fields in the table but are
hidden because writable=False.
You need to set writable=True after the form is created, before the
form is accepted.
If web2py thinks they are not writable will not allow a client to
write in them, as a security measure.
Massimo
O
On Aug 2, 2009, at 1:41 PM, mdipierro wrote:
>
> grrr. you are right. what about
>
> auth.settings.hmac_secret_key=''
>
> and modify admin so that when a new app is created '' is
> replaced by a something like str(uuid.uuid4())?
>
> Want to send me a patch?
I'll leave the patch to Fran, but note
grrr. you are right. what about
auth.settings.hmac_secret_key=''
and modify admin so that when a new app is created '' is
replaced by a something like str(uuid.uuid4())?
Want to send me a patch?
Massimo
On Aug 2, 3:33 pm, Fran wrote:
> On Aug 2, 9:21 pm, mdipierro wrote:
>
> > or better
> >
Thanks Armin,
my command below:
On Aug 2, 3:18 pm, Armin Ronacher wrote:
> Hi,
>
> Tired so just the most important parts first.
>
> On Aug 2, 9:21 pm, mdipierro wrote:> No there is
> not. Why do you think there is a race condition?
>
> If the execution of the module takes longer than, say a f
On Aug 2, 9:21 pm, mdipierro wrote:
> or better
> auth.hmac_key_auto()
> which would gererate a random key store it in private/hmac.key and
> retrieve it when needed.
Lovely :)
BUT wouldn't work on GAE (no filesystem access), so the other option
needs to be there too for GAE apps...
F
--~--~--
or better
auth.hmac_key_auto()
which would gererate a random key store it in private/hmac.key and
retrieve it when needed.
On Aug 2, 3:19 pm, mdipierro wrote:
> OK. Here is a proposal then.
>
> The only place where CRYPT is used in the scaffolding app is in Auth.
> Let's allows a new
>
>
Hi,
Tired so just the most important parts first.
On Aug 2, 9:21 pm, mdipierro wrote:
> No there is not. Why do you think there is a race condition?
If the execution of the module takes longer than, say a few minutes,
the timestamp would be off of course. Long running HTTP requests are
pretty c
hi, i have a question about hidden fields.
i have a form that looks like this:
fields=['f1','f2','f3'...]
hidden=dict(fieldname=val)
form = SQLFORM(db.table, fields=fields, showid=False, hidden=hidden)
in the view it's simply {{=form}}
when i look at the view, there's a hidden input field for
OK. Here is a proposal then.
The only place where CRYPT is used in the scaffolding app is in Auth.
Let's allows a new
auth.settings.hmac_key=None
set to None by default in Auth (not not break backward compatility)
but let's add a new line to welcome/models/db.py
auth.settings.hmac_key=
On Aug 2, 2009, at 12:24 PM, mdipierro wrote:
>
> But if there is a default key than everybody knows the default key.
> What's the point? The key has to be passed and has to be unique for
> every app.
The point is that the resulting hashes aren't in publicly available
precomputed rainbow table
But if there is a default key than everybody knows the default key.
What's the point? The key has to be passed and has to be unique for
every app.
On Aug 2, 1:52 pm, Fran wrote:
> On Aug 2, 7:41 pm, Jonathan Lundell wrote:
>
> > Then let's make this the default, with a default key.
>
> +1
> An
May be this help you
http://translate.google.pl/translate?js=n&prev=_t&hl=pl&ie=UTF-8&u=http%3A%2F%2Fblog.pagenoare.net%2F2009%2F03%2F20%2Fweb2py-na-lighttpd-fcgi%2F&sl=pl&tl=en&history_state0=
On 2 авг, 19:55, Pynthon wrote:
> Ok, I looked on Web2Py AlterGo but I cannot find anything about it :
I am about to catch a plane so I will be short. We can talk more about
this in a couple of days.
> > First a word of warning. I send you this mail in private because I
> > want
> > to share my thoughts on the web2py code and because I hope I can help
> > with that somehow. You're free to publ
On Aug 2, 2009, at 11:57 AM, Pynthon wrote:
> Yeah, I think I know what you mean. But Fran's his/her example did
> work =].
It did, because it was a DAL example: db.image.title.like('%smile%')
and the image is an SQL example: image.title LIKE '%smile%'
--~--~-~--~~~--
On Aug 2, 7:56 pm, Jonathan Lundell wrote:
> > Yeah, that screen is also in my book!
> Notice that this dialog allows you to type actual SQL code. It's not
> an example of a DAL call.
Maybe an older appadmin was like that...current appadmin uses DAL
syntax...
F
--~--~-~--~~---
On Aug 2, 7:21 pm, Massimo Di Pierro wrote:
> > From: Armin Ronacher
> > - or the global scope has different semantics and is reevaluated each
> > request.
> > Turns out the latter is what happens in web2py. There still is a race
> > condition but only a small one. The bigger problem with thi
Yeah, I think I know what you mean. But Fran's his/her example did
work =].
On 2 aug, 20:56, Jonathan Lundell wrote:
> On Aug 2, 2009, at 11:52 AM, Pynthon wrote:
>
>
>
> > Yeah, that screen is also in my book!
>
> Notice that this dialog allows you to type actual SQL code. It's not
> an examp
On Aug 2, 2009, at 11:52 AM, Pynthon wrote:
>
> Yeah, that screen is also in my book!
Notice that this dialog allows you to type actual SQL code. It's not
an example of a DAL call.
>
> On 2 aug, 20:50, Jonathan Lundell wrote:
>> On Aug 2, 2009, at 10:00 AM, Fran wrote:
>>
>>> On Aug 2, 5:45
Yeah, that screen is also in my book!
On 2 aug, 20:50, Jonathan Lundell wrote:
> On Aug 2, 2009, at 10:00 AM, Fran wrote:
>
> > On Aug 2, 5:45 pm, Pynthon wrote:
> >> db.image.title like( 'smile%') or db.image.title like 'smile%' it
> >> still says invalid query...
>
> > db.image.title.like('%s
On Aug 2, 7:41 pm, Jonathan Lundell wrote:
> Then let's make this the default, with a default key.
+1
An easy way to add /some/ security (i.e. helps against attacks which
don't know about web2py) & if this is int he scaffolding app, then it
makes it clearer that this is a change people should ma
Thanks! A lot of the examples in the work doesn't work anymore?
On 2 aug, 20:43, Fran wrote:
> On Aug 2, 7:34 pm, Pynthon wrote:
>
> > Hmm no I have another problem: When I want to add a new comment it
> > gives me the error: OperationalError: no such column: image.db.image.
> > This is my mode
On Aug 2, 7:34 pm, Pynthon wrote:
> Hmm no I have another problem: When I want to add a new comment it
> gives me the error: OperationalError: no such column: image.db.image.
> This is my model:http://pynthon.pastebin.com/m22eb7f7e
db.comment.image_id.requires = IS_IN_DB(db, 'image.id', 'image.t
On Aug 2, 2009, at 11:26 AM, mdipierro wrote:
>
> On Aug 2, 1:11 pm, Jonathan Lundell wrote:
>> On Jul 31, 2009, at 11:11 PM, Bottiger wrote:
>>
>>
>>
>>> I wrote before that I would not say anything about this anymore, but
>>> having this thread pop up multiple times presented itself as a
>>> p
Nice, I know I think who this is.. However, do you all going to fix
this and when do you think the new version will be available?
Thanks
On 2 aug, 20:21, Massimo Di Pierro wrote:
> Thank you Armin, I am passing this to the list and will address them
> asap.
>
> Begin forwarded message:
>
> >
Hmm no I have another problem: When I want to add a new comment it
gives me the error: OperationalError: no such column: image.db.image.
This is my model: http://pynthon.pastebin.com/m22eb7f7e
Thanks
On 2 aug, 19:00, Fran wrote:
> On Aug 2, 5:45 pm, Pynthon wrote:
>
> > db.image.title like( 's
Thanks Fran! That works like a charm =]!
Thanks
On 2 aug, 19:00, Fran wrote:
> On Aug 2, 5:45 pm, Pynthon wrote:
>
> > db.image.title like( 'smile%') or db.image.title like 'smile%' it
> > still says invalid query...
>
> db.image.title.like('%smile%')
>
> The screenshot is clearly wrong.
>
> F
On Aug 2, 1:11 pm, Jonathan Lundell wrote:
> On Jul 31, 2009, at 11:11 PM, Bottiger wrote:
>
>
>
> > I wrote before that I would not say anything about this anymore, but
> > having this thread pop up multiple times presented itself as a
> > persistent itch.
>
> > First of all I would like to apol
On Aug 1, 2009, at 4:03 AM, mdipierro wrote:
> Problems:
> a) You still need to pass a key to CRYPT
> b) It will break backward compatibility unless data is converted
> c) We cannot easily convert the data without human intervention.
We could, actually, but always encoding and checking with pass
Thank you Armin, I am passing this to the list and will address them
asap.
Begin forwarded message:
> From: Armin Ronacher
> Date: August 2, 2009 1:10:29 PM CDT
> To: "DiPierro, Massimo"
> Subject: My thoughts on web2py
>
> Hi Massimo,
>
> First a word of warning. I send you this mail in pri
On Aug 2, 6:49 pm, jayvandal wrote:
> File "gluon/sql.py", line 995, in define_table
> SyntaxError: invalid table name: auth_user
> auth.define_tables() # creates all needed tables
Comment out this one.
Since you have these lower down:
> auth.settings.table_user = db.de
On Jul 31, 2009, at 11:11 PM, Bottiger wrote:
>
> I wrote before that I would not say anything about this anymore, but
> having this thread pop up multiple times presented itself as a
> persistent itch.
>
> First of all I would like to apologize if I came off before as a
> little abrasive. Second
Hello,
I tried using the code suggested. I get this error? I can see where it
seems to be good code.
Thanks for any help
Error ticket for "med"
Ticket 127.0.0.1.2009-08-02.11-43-36.b6521ed1-
f325-42e3-9976-5671ab4c227e
Error traceback
1.
2.
3.
4.
5.
6.
Traceback (most recent call last):
Fi
What is PolyModel? How is different than what DAL already does when
running on GAE?
On Aug 2, 11:33 am, dlypka wrote:
> I just got an experimental version of T3 to work with the PolyModel
> base class in GAE.
> That gives inherited Classes.
> So GAE is Quite Amazing.
>
> I almost have my own DAL
I happen to know this project uses web2py.
On Aug 1, 3:53 pm, mdipierro wrote:
> http://montreal.en.craigslist.ca/eng/1300545929.html
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"web2py-users" group.
To post to
On Aug 2, 5:45 pm, Pynthon wrote:
> db.image.title like( 'smile%') or db.image.title like 'smile%' it
> still says invalid query...
db.image.title.like('%smile%')
The screenshot is clearly wrong.
F
--~--~-~--~~~---~--~~
You received this message because you are
Yeah I saw that when I submitted the post however when I do:
db.image.title like( 'smile%') or db.image.title like 'smile%' it
still says invalid query...
On 2 aug, 18:38, Álvaro Justen [Turicas]
wrote:
> On Sun, Aug 2, 2009 at 13:23, Pynthon wrote:
>
> > Hello
>
> > I'm following along with yo
On Sun, Aug 2, 2009 at 13:23, Pynthon wrote:
>
> Hello
>
> I'm following along with your book, great resource! However, when I do
> this (on page: 58 in the PDF version that I bought on 2009-04-24!)
> db.image.id LIKE 'me%' it says "Invalid query'. But what's wrong with
> it?
>
> Thanks again!
Ca
I just got an experimental version of T3 to work with the PolyModel
base class in GAE.
That gives inherited Classes.
So GAE is Quite Amazing.
I almost have my own DALnr ('nr' = non relational) for web2py working
with GAE now.
It is using my 'Phantom' Field concept (special table fields in a
db.de
Hello
I'm following along with your book, great resource! However, when I do
this (on page: 58 in the PDF version that I bought on 2009-04-24!)
db.image.id LIKE 'me%' it says "Invalid query'. But what's wrong with
it?
Thanks again!
--~--~-~--~~~---~--~~
You receiv
Ok, I looked on Web2Py AlterGo but I cannot find anything about it :(.
Does someone has a tutorial how to install web2py with FastCGI?
On 2 aug, 17:44, mdipierro wrote:
> use FastCGI, CGI should really be a last resort.
>
> On Aug 2, 10:33 am, Pynthon wrote:
>
> > My host said that FastCGI and
I offer "Web2py Ready" hosting plans using wsgi:
1. Starter
Ssh access (/home/user/ and web2py in /home/user/web2py/)
1 GB disk
1 GB postgresql or mysql database
1 database/user
50 GB network traffic/month
Price: $5/month or $50/year
2. Simple
Ssh access (/home/user/ and web2py in /home/user/web
use FastCGI, CGI should really be a last resort.
On Aug 2, 10:33 am, Pynthon wrote:
> My host said that FastCGI and CGI are available.
>
> On 2 aug, 13:43, Pynthon wrote:
>
> > I will ask my hoster. Is it also possible to rent some space on
> > someones VPS?
>
> > Thanks
>
> > On 2 aug, 13:30,
IMO GAE is too difficult :P.
On 2 aug, 07:02, Bottiger wrote:
> Google has sunk too much time and effort into adapting Django to
> recommend another framework. They also need to attract more users to
> GAE which Django has plenty of.
>
> On Aug 1, 3:12 pm, mdipierro wrote:
>
> > Yes, if only th
My host said that FastCGI and CGI are available.
On 2 aug, 13:43, Pynthon wrote:
> I will ask my hoster. Is it also possible to rent some space on
> someones VPS?
>
> Thanks
>
> On 2 aug, 13:30, Fran wrote:
>
> > On Aug 2, 11:44 am, Pynthon wrote:
>
> > > Aha, because then I already have a hos
I see two problems that need to be solved and may require change in
Auth:
- all existing login methods use the same form (username/email
+password) but OID is different. So Auth must be able to delegate to
the login method form generation and processing
- OpenID does not necessarily return a firs
I agree. Also, OID should just be an alternative login method, with
the standard method always being available (unless disabled) too.
=HC
On Aug 2, 3:24 pm, mdipierro wrote:
> Let's think about this some more.
>
> Massimo
>
> On Aug 2, 8:23 am, hcvst wrote:
>
> > Hi Massimo,
>
> > I like the p
On Aug 2, 2:10 pm, Pynthon wrote:
> Just a note: Web2py creates automatically an id for each table right?
Yes
F
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"web2py-users" group.
To post to this group, send emai
stay off the IRC channels!
things like google groups are much more sofisticated ad useful.
IRC is good for childs and "desperate housewives", IMO.
-
On Jul 30, 3:10 am, __future__ wrote:
> I have seen this come up in some other thread about people not us
Let's think about this some more.
Massimo
On Aug 2, 8:23 am, hcvst wrote:
> Hi Massimo,
>
> I like the plugin. Just three methods to implement and I do not not
> need to know how
> Auth works under the hood. In terms of maintenance this seems nice, as
> it's quite
> loosely coupled. Sure, when
Hi Massimo,
I like the plugin. Just three methods to implement and I do not not
need to know how
Auth works under the hood. In terms of maintenance this seems nice, as
it's quite
loosely coupled. Sure, when extending Auth, the user only has to
change Auth to OpenIDAuth
in the model, but that's o
Just a note: Web2py creates automatically an id for each table right?
On 2 aug, 15:05, Alastair Medford wrote:
> Aha, thanks for both the great answers. I had a slight idea as to what
> each were, but I had never seen those variations of the syntax. Thanks
> again.
>
> On Aug 1, 11:14 am, Yarko
On Aug 2, 1:22 pm, Boris Manojlovic
wrote:
> can that person who created that appliance change title to real data not
> html :)
Fixed ;)
My error, not Massimo's...
F
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
Yes, I was searching for something like that! But maybe it's also
possible to let people post here (in this topic) their Web2Py app?
On 2 aug, 14:55, mdipierro wrote:
> If you want to share the source code of app it can be linked
> (recommended) or hosted athttp://web2py.com/appliancesuntil we g
Aha, thanks for both the great answers. I had a slight idea as to what
each were, but I had never seen those variations of the syntax. Thanks
again.
On Aug 1, 11:14 am, Yarko Tymciurak wrote:
> On Sat, Aug 1, 2009 at 5:00 AM, Fran wrote:
>
> > On Aug 1, 3:32 am, Alastair Medford wrote:
> > > >
If you want to share the source code of app it can be linked
(recommended) or hosted at http://web2py.com/appliances until we get a
better system
I also use this to keep track of web2py powered sites:
http://www.appliedstacks.com/NewestFirst/web2py
Is this what you mean?
Massimo
On Aug 2, 7:2
Hello Web2Py users =]!
I searched at the wiki and the website and I found something about
sites that using Web2Py (that were only big ones) so I thought why not
make a topic about it :$, where you can share your Web2Py app?
--~--~-~--~~~---~--~~
You received this m
can that person who created that appliance change title to real data not
html :)
(look at screenshot)
On Sun, Aug 2, 2009 at 1:44 PM, Pynthon wrote:
>
> I'm a lot in the IRC, the problem is that you need to advertise it at
> your site. Add it to the support page!
>
> On 2 aug, 12:01, Fran wrote
You are right. It works.
Thank you for replying so quickly and so helpful!
2009/8/2 Yarko Tymciurak
> the parameters file is per port; so parameters_8000.py is for port 8000;
> if you are running on apache and under port 80, simply copy, rename, or link
> parameters_8000.py to parameters_80.py
the parameters file is per port; so parameters_8000.py is for port 8000;
if you are running on apache and under port 80, simply copy, rename, or link
parameters_8000.py to parameters_80.py
2009/8/2 陶艺夫
> Yes. I got the message "admin disabled because unable to access password
> file" when I t
I'm a lot in the IRC, the problem is that you need to advertise it at
your site. Add it to the support page!
On 2 aug, 12:01, Fran wrote:
> On Jul 30, 6:56 pm, Fran wrote:
>
> > I don't fancy installing TurboGears/Arkivo to make it super-fancy.
> > If anyone else has simpler ideas to make it ou
I will ask my hoster. Is it also possible to rent some space on
someones VPS?
Thanks
On 2 aug, 13:30, Fran wrote:
> On Aug 2, 11:44 am, Pynthon wrote:
>
> > Aha, because then I already have a host. It has Python support but no
> > SSH acces. However, is there a tutorial to set W2P on a host wi
Yes. I got the message "admin disabled because unable to access password
file" when I tried to get into admin app.
Then started over the web2py using -a parameter and assigned a password. I
saw the file parameters_8000.py showed up.
But the problem is still there. Now what I can do?
Thanks.
2009/8
On Aug 2, 11:44 am, Pynthon wrote:
> Aha, because then I already have a host. It has Python support but no
> SSH acces. However, is there a tutorial to set W2P on a host without
> SSH access?
Plenty:
http://www.web2py.com/AlterEgo
What do you have available:
* Ideally WSGI
* if not, FastCGI
* i
No. I am just saying that saying that it will be easier to implement a
new class that extends Auth with OpenID, instead of creating a OpenID
plugin for Auth.
The interface will be the same so you do not need to change your code
but you need to change the line
auth=Auth(...)
to
auth=OpenIDAuth(.
Comment to self really. OID has to be stored, as otherwise any
OID claiming to be associated with email address can access
that account.
On Aug 2, 12:59 pm, hcvst wrote:
> Hi Massimo,
>
> thanks for your reply.
>
> I had another look and don't think one has to necessarily reimplement
> all
> Aut
Hi Massimo,
thanks for your reply.
I had another look and don't think one has to necessarily reimplement
all
Auth functions. I think that the setup above works in principle, but
that there are
some inconsistencies within Auth one has to work around at the moment.
Let me summarize briefly.
The M
Aha, because then I already have a host. It has Python support but no
SSH acces. However, is there a tutorial to set W2P on a host without
SSH access? And indeed a VPS is a lot nicer but I can't effort that :
(.
Thanks
On 2 aug, 12:40, Fran wrote:
> On Aug 2, 11:34 am, Pynthon wrote:
>
> > Ah,
On Aug 2, 11:34 am, Pynthon wrote:
> Ah, I thought you also need to have SSH access?
Makes things nicer, of course, but it's not necessary.
Personally I'll go the extra & pay USD 100/year for a full VPS:
http://pcsmarthosting.com/clients/aff.php?aff=007
F
--~--~-~--~~~--
Ah, I thought you also need to have SSH access?
2. That sounds good!
On 2 aug, 12:18, Fran wrote:
> On Aug 2, 10:29 am, Pynthon wrote:
>
> > 1. What about Web2Py hosting? Is it possible to have a host for <= 50
> > Dollar a year? I know there is GAE but I want to do image, uploading,
> > se
On Aug 2, 10:29 am, Pynthon wrote:
> 1. What about Web2Py hosting? Is it possible to have a host for <= 50
> Dollar a year? I know there is GAE but I want to do image, uploading,
> sessions etc. Yeah, I know 50 Dollar isn't much but I'm 14 years old
> and I need to pay it by myself.
I'd guess th
On Jul 30, 6:56 pm, Fran wrote:
> I don't fancy installing TurboGears/Arkivo to make it super-fancy.
> If anyone else has simpler ideas to make it output something nicer,
> then I'm happy to install something to do that.
> (e.g. if someone wants to merge http://mg.pov.lt/irclog2html/into
> loggy.
Hello
I just had still a few questions :$.
1. What about Web2Py hosting? Is it possible to have a host for <= 50
Dollar a year? I know there is GAE but I want to do image, uploading,
sessions etc. Yeah, I know 50 Dollar isn't much but I'm 14 years old
and I need to pay it by myself.
2. How abou
80 matches
Mail list logo
