[web2py] Re: DAL IMAP errors

2012-06-21 Thread pyhead
Adapter with any other mail brand. I forgot to upload the app > installer to the project page. Now it's available here: > > http://code.google.com/p/gpo2py/downloads/detail?name=web2py.app.gpo2py.w2p > > Is there any error output that we can use to debug your app? > > O

Re: [web2py] Re: web2py + Rocket server SSL is vulnerable

2012-06-19 Thread pyhead
e python-ssl module. Perhaps there >>> is a way to configure this wrapper. It would help to know if the >>> same vulnerabilities arise with other python web servers which use >>> python-ssl. If not we could see what settings are different. >>> >>> Mas

[web2py] admin login page invites admin to leak password

2012-06-19 Thread pyhead
Security vulnerability When accessing the admin page on a server with http and https both enbled, admin may accidentally attempt to login via http. The login page looks the same and displays an input for the password even when the login will be rejected due to insecure http protocol, while sti

[web2py] Re: DAL IMAP errors

2012-05-18 Thread pyhead
Unfortunately neither of these seems to work. I downloaded your gpo2py mail client that uses DAL IMAP hoping to use it as an example, but it doesn't work at all. Have you tested it with any IMAP servers that work, or is this problem specific to the gmail IMAP server? I'm stuck. On Monday, Ap

[web2py] Re: Where do we submit book errata?

2012-05-18 Thread pyhead
SSL page missing on http://web2py.com/books/default/chapter/29/13 "generate your own self-signed certificates following the instructions in ref." link broken: [openssl] http://web2py.com/books/default/reference/29/openssl Example code error: http://www.web2py.com/books/default/chapter/29/4#Di

[web2py] web2py + Rocket server SSL is vulnerable

2012-05-18 Thread pyhead
Analyzing web2py + Rocket (1.2.4) with the SSL Server Test reveals vulnerabilities that give it an 'F' rating even when using the strongest RSA 4096 bit key. web2py's mission is to provide high security by default so it should be hardened to address these issues. Hopefully it is as simple as

[web2py] Re: Digitally signed URLs

2012-04-18 Thread pyhead
Thanks Niphlod, adding request works! The book should be corrected.

[web2py] DAL IMAP errors

2012-04-14 Thread pyhead
Hi web2py users, db = DAL('imap://') successfully logs in to the mail server, but fails when the commonly used spaces or '.' are returned in a folder name. Is there any way to substitute not allowed characters for '_' so imap works? only [0-9a-zA-Z_] allowed in table and field names, receive

[web2py] Digitally signed URLs

2012-04-14 Thread pyhead
I copied and pasted the examples for web2py Digitally signed URLs andthey are giving errors on the latest stable build. http://www.web2py.com/books/default/chapter/29/4#Digitally-signed-urls TypeError: verifyURL() takes at least 1 argument (1 given) The error is confusing as it seems to confi