[web2py] Pls help me with info. about security testing

Can someone please recommend a hands-on book or some articles about security testing beside the "Web Security Testing Cookbook" (http:// www.amazon.com/Web-Security-Testing-Cookbook-Systematic/dp/0596514832 ) ? I don't want to use Perl as recommended in that book. Thanks in advance.

[web2py] Re: Creating subdomain on user registration

Thanks Jonathan & Kenneth, have successfully implemented the subdomain module based on your feedback ( using request.env.http_host ) and setting it globally ( 0.py ) using the following function: def get_subdomain(): """ Extracts subdomain from the url """ try: subdom

Re: [web2py] JQuery harmonica menu, but what's the use in web2py, I'm totally confused

This isn't really a direct answer to your question but it might help clarify some things for you (it got me thinking anyway)... it's a quote from a user on another mailing list: "There's been a big move toward Javascript-heavy web apps in the last couple of years, and new tools & frameworks are sp

[web2py] Pls help me with info. about security testing

Can someone please recommend a hands-on book or some articles about security testing beside the "Web Security Testing Cookbook" (http:// goo.gl/E1fbL ) ? I don't want to use Perl as recommended in that book. Thanks in advance.

[web2py] Please help me with info. about security testing

Can someone please recommend a hands-on book or some articles about security testing beside the "Web Security Testing Cookbook" (http://goo.gl/E1fbL )? I don't want to use Perl as recommended in that book. Thanks in advance.

Re: [web2py] JQuery harmonica menu, but what's the use in web2py, I'm totally confused

Sorry - posted broken link to CoffeeScript site. It should have been: http://jashkenas.github.com/coffee-script/ On 3 February 2011 08:16, Tom Atkins wrote: > > http://jashkenas.github.com > > >

Re: [web2py] Pls help me with info. about security testing

A few links, just to give you a start point http://www.web2py.com/book/default/chapter/01#Security http://www.pythonsecurity.org/

[web2py] Re: web2py promoted at Google App Engine Montreal Hackathon Sat Jan 22

Awesome news, I am really curious to see where this is heading! By the way, 2 weeks ago I wrote a short post on our experiences on web2py and GAE. So I am extra thrilled, and will evangelize it even more. I really hope web2py gains more traction in the Netherlands, there are so many talented de

[web2py] Re: Pls help me with info. about security testing

Thanks a lot. Yeah, I'll go with OWASP. On Feb 3, 3:54 am, Vasile Ermicioi wrote: > A few links, just to give you a start point > > http://www.web2py.com/book/default/chapter/01#Security > > http://www.pythonsecurity.org/

[web2py] order by surname, name

According to the book the syntax to create an 'order by' query is db(query).select(ALL,orderby=field). What if I want to use more than one field in the 'order by' ? Regards Johann -- May grace and peace be yours in abundance through the full knowledge of God and of Jesus our Lord! His divin

[web2py] Differing Form Presentation with SQLFORM readonly=True

Hello, I have a field defined like this: Field('state', 'string', requires=IS_IN_DB(db, 'state.id', 'state.abbreviation', zero=T('Choose one'))) If I create a SQLFORM like this, form = SQLFORM(db.address, address) I get what I expect: a drop-down menu displaying all of the state.abb

[web2py] Re: order by surname, name

Hi Johann, Just use "|": orderby=db.table.name|db.table.surname On 3 fév, 13:56, Johann Spies wrote: > According to the book the syntax to create an  'order by'  query is > db(query).select(ALL,orderby=field). > > What if I want to use more than one field in the 'order by' ? > > Regards > Johann

[web2py] Checking permissions on a group

Hello, I can't seem to find an easy way to check if a *group* has a permission without making my own query on the auth_permission table (and then I lose auth logging and the code is uglier). auth.has_permission only works on users, not groups, as far as I can tell. I need it for a control which is

Re: [web2py] Checking permissions on a group

I think that the idea is that if you belong to a specific group you have some specific rights. I have not seen anything about giving permissions to groups. Kenneth Hello, I can't seem to find an easy way to check if a *group* has a permission without making my own query on the auth_permissi

[web2py] Re: Checking permissions on a group

As far as I understand, you then assign permissions to groups with add_permission. >From the manual: >auth.add_permission(group_id, 'name', 'object', record_id) >gives permission "name" (user defined) on the object "object" (also user >defined) to members of the group group_id. The problem is,

[web2py] Re: web2py promoted at Google App Engine Montreal Hackathon Sat Jan 22

that's fantastic you get early access to the SDK, and hopefully that lets you support new features faster.

Re: [web2py] Re: migration from 1.88.2 to 1.91.6 problem

Gone! Thanks you. Richard On Wed, Feb 2, 2011 at 6:17 PM, Massimo Di Pierro < massimo.dipie...@gmail.com> wrote: > This has already been fixed some some time ago in trunk. It is now: > >if self.table[fieldname].type == 'boolean' and \ > self.vars.get(fieldnam

Re: [web2py] Re: order by surname, name

+ you can use ~ to reverse order. http://web2py.com/book/default/chapter/06#orderby,-groupby,-limitby,-distinct On Thu, Feb 3, 2011 at 2:21 PM, dederocks wrote: > Hi Johann, > > Just use "|": > orderby=db.table.name|db.table.surname > > On 3 fév, 13:56, Johann Spies wrote: > > According to the

Re: [web2py] Re: Creating subdomain on user registration

On Feb 3, 2011, at 12:15 AM, Prashanth wrote: > > If _next is set with some value ( eg: _next='myapp/default/show_id' : > show_id has @auth.login_required ) .. set_domain method will not get > called and it just redirects to the value set in _next variable in > which case I will not be able the re

[web2py] Re: pending issues?

Another possible feature I hope to see in this or upcoming releases is an official support for the admin app to have different users (different users will be able view and edit only their apps). In previous discussions, I think you implemented this in trunk. I hope this feature becomes official.

Re: [web2py] Please help me with info. about security testing

Back Track On Thu, Feb 3, 2011 at 3:19 AM, AW wrote: > Can someone please recommend a hands-on book or some articles about > security testing beside the "Web Security Testing Cookbook" > (http://goo.gl/E1fbL )? I don't want to use Perl as recommended in > that book. > > Thanks in advance.

[web2py] Re: Multiple Selection and Send Email

I've written the validator like this: def create(): db.booking.room_id.requires = IS_IN_DB(db, db.room.id, '% (name)s',multiple=True) form = crud.create(db.booking, next = URL('index')) return dict(form=form) and when I run it in the browser if I try to save the data I get a ticket, t

[web2py] Re: Differing Form Presentation with SQLFORM readonly=True

this is fixed in trunk already On Feb 3, 7:01 am, Art Zemon wrote: > Hello, > > I have a field defined like this: > >     Field('state', 'string', requires=IS_IN_DB(db, 'state.id', >     'state.abbreviation', zero=T('Choose one'))) > > If I create a SQLFORM like this, > >     form = SQLFORM(db.ad

[web2py] Unicity condition and database update

Hi guys, I'm currently facing a strange thing :) I make use of datatables (jquery datatables.net) and jeditable to update values in my db. If the user clicks on a value, he changes it and sends it, thus, only the value of this field. On the server part, i then do a db.alarms[request.vars.id].upda

[web2py] Attention: Web application developers! Exciting event on Feb 26th in Pune (WebApps 2011)

Hello, SiliconIndia is organizing WebApps 2011 at Pune on Feb 26th, 2011.Drawing well-renowned thought-leaders, contributors, influencer's, and organizations in the Web Development space, the conference offers insight to develop industry-leading Web Development projects. The conference brings tog

Re: [web2py] Checking permissions on a group

On Thu, Feb 3, 2011 at 11:08 AM, Clayton wrote: > Hello, > > I can't seem to find an easy way to check if a *group* has a > permission without making my own query on the auth_permission table > (and then I lose auth logging and the code is uglier). > auth.has_permission only works on users, not g

[web2py] Re: pending issues?

I think "self['_last_reference'] = tmp" is missing from insert() in the dal.py: Here is my suggested patch: def insert(self,table,fields): dfields=dict((f.name,self.represent(v,f.type)) for f,v in fields) # table._db['_lastsql'] = self._insert(table,fields) tmp = table.

Re: [web2py] Checking permissions on a group

On Feb 3, 2011, at 6:14 AM, Franzé Jr wrote: > On Thu, Feb 3, 2011 at 11:08 AM, Clayton wrote: > Hello, > > I can't seem to find an easy way to check if a *group* has a > permission without making my own query on the auth_permission table > (and then I lose auth logging and the code is uglier). >

[web2py] Re: Unicity condition and database update

The problem is that unicity must be computed but it needs triggename. You are not passing triggername when you do the update_rector and web2y does not do what to do. web2py wants you to be explicit: row=db.alarms(2) row.update_record(message='rz',triggerName=row.triggerName) On Feb 3, 4:40 am, "

[web2py] Re: Checking permissions on a group

ok. will do this later today. Massimo On Feb 3, 11:10 am, Jonathan Lundell wrote: > On Feb 3, 2011, at 6:14 AM, Franzé Jr wrote: > > > > > > > > > > > On Thu, Feb 3, 2011 at 11:08 AM, Clayton wrote: > > Hello, > > > I can't seem to find an easy way to check if a *group* has a > > permission wit

Re: [web2py] Checking permissions on a group

Sounds like a web2py-way soolution, simple and elegant :=) Kenneth On Feb 3, 2011, at 6:14 AM, Franzé Jr wrote: On Thu, Feb 3, 2011 at 11:08 AM, Clayton wrote: Hello, I can't seem to find an easy way to check if a *group* has a permission without making my own query on the auth_permission t

[web2py] Capturing history of values in a field

Here's an example of what I am trying to do - suppose I have an app that tracks a sales pipeline in which each opportunity moves through a series of stages (ending with either a closed sale or a lost sale). In most daily usage, all I need to know is the current status. The challenge is that I also

[web2py] username or email

hi all. i know we can use username instead of email by simply adding username=True to auth, but i wanted to know if there happened to be a way to use either. for example, i have parent and children users, and i want kids to use username, since they might not have email addresses. but i want parent

Re: [web2py] username or email

not sure if something like that is implemented, but here's what you can do: before validating form: 1. check if email is given in post vars (instead of username) 2. if it is, make select query to db to find out username related to given email 3. change variable (if email is given in username field

[web2py] Re: background task error

I tried both web2py.py files on a different Mac and get the same errors. How does python know where to find gluon? Is it a problem that I have python installed separately on my Mac?

Re: [web2py] Search form in CRUD

Hi All, Not sure if anyone else has worked through the CRUD URLs described in the book on p317, but the search URL described does not work: - def client_search(): return dict(form=crud.search(db.client)) ...works as expected, but using: - def data(): return dict(form=crud()) ...and

[web2py] Re: Capturing history of values in a field

This might be doable by using _select (note the underscore) for the inner selection. Can you post the SQL command that you wish to accomplish?. On Feb 3, 2:14 pm, Philip wrote: > Here's an example of what I am trying to do - suppose I have an app > that tracks a sales pipeline in which each opp

[web2py] Re: rename / route app admin

Yes, it's work. But appadmin database administraton redirects to admin/ default/index and rises invalid request error. How to fix it? On 3 фев, 01:28, Massimo Di Pierro wrote: > Just rename its folder. > > Counter indication: the redirection for appadmin login will break. > > On Feb 2, 2:24 pm, L

[web2py] Re: rename / route app admin

Looks like there are a couple occurrences of 'admin' in the top section of the appadmin.py controller file (i.e., in the controllers folder of your app) -- one for the redirection and one for the menu. Try changing those to the new admin app name. On Thursday, February 3, 2011 2:54:33 PM UTC-5,

[web2py] Bug in def data(): return dict(form=crud())

Found a bug. I wrote: def data(): return dict(form=crud()) The page .../default/data/select/orders creates a nice list of all records in the orders table. The links in the ID column are wrong, though. They are to URLs of this form: .../default/read/orders/3 instead of .../default/

[web2py] Re: Bug in def data(): return dict(form=crud())

I think that bug has been fixed already in trunk: https://groups.google.com/d/topic/web2py/iquAOtqZPNM/discussion On Thursday, February 3, 2011 3:16:22 PM UTC-5, Art Zemon wrote: > Found a bug. I wrote: > > def data(): return dict(form=crud()) > > The page .../default/data/select/orders creates

Re: [web2py] JQuery harmonica menu, but what's the use in web2py, I'm totally confused

Thanks Tom, your answer helped me a lot. I come to the following conclusion: - Relatively little information, which much GUI interactive changes can best be done in JS. (btw I use PyJamas for that so I can program in pure Python) - Much information, which heavily changes on the base of user inte

[web2py] Form to Email

I expect that I am going about this the wrong way but here it goes.. I am currently designing a form for my web2py website. When the user clicks submit I would like my application to send me the form fields via email. My hosting provider will supply form mail.php files: On Linux hosting acco

[web2py] GAE Query

I am using GAE to run my website web2py application. I have added the domain to my GAE site settings. Does this affect the way i can access the files on my website? For example I have a couple of image files @ root on my host, when I try to explore to that location using a web browser I get an inv

Re: [web2py] Form to Email

I wouldn´t use those PHP scripts if you wan´t to use web2py. You need to make a form with SQLFORM. I guess you wan´t to save the fields to a database and send them to you via email. In the if form.accepts section you gather the data and create the mail you want to send. Kenneth I expec

[web2py] powertable problem

hi all, i'm testing powertable plugin but i can't make it work correctly (i don't have the "green plus" icon for expand the row of a table item) where is the problem? this is my code: def index(): """ Test powerTable """ table = plugins.powerTable table.datasource = db.auth_us

Re: [web2py] powertable problem

Too me it sounds like you have a problem with getting the data that should be shown in details. If powertable never gets data that should be displayed it doen´t show the "green plus". Why are you calling URL('myfunction.load') and not URL('myfunction')? Kenneth hi all, i'm testing powertab

[web2py] http and https

Hi, I want to use one server with two addresses, e.g. http://www.mydomain.org:80and https://secure.mydomain.org:443 What shall I do: - start two instances of web2py - or use URL-rewrite? Regards, Martin

Re: [web2py] powertable problem

Do you have the latest version of the plugin? Demo app and newest plugin version in: https://bitbucket.org/rochacbruno/ powertable/downloads Hi, I could not reproduce your model, but here it is my example app running. db.define_table('category', Field('name'),

[web2py] Re: Checking permissions on a group

You all rock. Thanks for the fast response! Clayton

[web2py] Re: upload an excel sheet to be added to the system

Dear Brian, Thanks a lot for your help. On Feb 3, 4:29 am, Brian M wrote: > Neveen, > > I've got a mini app that I upload excel files to for later parsing, here's > now I do it. Getting the file would probably be even easier if you used an > upload field in the DB & CRUD forms. > > def excel_u

[web2py] Re: username or email

hi marin. good thought -- i'll give that a try. thanks! On Feb 3, 11:32 am, Marin Pranjic wrote: > not sure if something like that is implemented, but here's what you can do: > > before validating form: > 1. check if email is given in post vars (instead of username) > 2. if it is, make select que

[web2py] Redirect after GAE authorization.

I'm using GAE. Is there a possibility to perform a redirect back to a page where I have come to perform authentication?

Re: [web2py] http and https

No need to start to instances of web2py. If you use Jonathan's new routers syntax available in trunk you can put something like this in routes.py: routers = dict( BASE = dict( domains = { 'www.domain.com:80 ' : 'myappname', 'secure.domain.com:443'

Re: [web2py] http and https

there are 2 ports, so I think he must run 2 instances, he can use router if he uses a proxy like nginx which will pass all requests to the web2py

[web2py] Re: IS_MATCH() changing a valid value ?

You are right. Having (re)read the documentation for re, I find that it is working as advertised. My original regex was wrong. However, I would argue that if the match found by regex.match() is different from the input value, IS_MATCH should return an error. That is, in the IS_MATCH.__call__ defini

[web2py] Re: Capturing history of values in a field

while not answering your select question, check out crud.archive: http://web2py.com/book/default/chapter/07?search=archive it's pretty slick and does the archiving for you automagically. now your query is still a problem

[web2py] Re: GAE Query

this depends on many factors including: * DNS config for the domain and sub-domains * app.yaml * routes.py if you have the GAE app on 1 subdomain, and other web services on another subdomain that is fine. if all traffic is going to the same sub-domain which is mapped to GAE, GAE will service

Re: [web2py] Re: IS_MATCH() changing a valid value ?

On Feb 3, 2011, at 3:03 PM, Ken wrote: > > You are right. Having (re)read the documentation for re, I find that > it is working as advertised. My original regex was wrong. However, I > would argue that if the match found by regex.match() is different from > the input value, IS_MATCH should return

Re: [web2py] http and https

On Feb 3, 2011, at 2:43 PM, Vasile Ermicioi wrote: > there are 2 ports, so I think he must run 2 instances, > he can use router if he uses a proxy like nginx which will pass all requests > to the web2py > It should work for Apache, too, as long as Apache is configured to go to web2py for bot

[web2py] Re: Error acessing Database Administration

First of all, thank you for your quick response. I already figure it out. That database was generated by the export to web2py tool from the online database design. I made a new one "by my hand" without the "online tool" following your tip and it worked! Thanks again and congratulations for your wor

[web2py] Re: Capturing history of values in a field

Thanks - I haven't used _select - I'm checking into it now. Thanks, Philip On Feb 3, 2:54 pm, DenesL wrote: > This might be doable by using _select (note the underscore) for the > inner selection. > Can you post the SQL command that you wish to accomplish?. > > On Feb 3, 2:14 pm, Philip wrote:

[web2py] Re: Multiple users on computer and authorization with Janrian (RPX)

Thanks a lot for your response, I tried to follow it but got a "Not defined" error for the clean_session() function you'd mentioned. I tried to force "session.clear" at the begging of modules/menu.py, but the after logging out from my app, Janrain's plugin still recognized me with "Welcome back" an

[web2py] localize messges in gluon/tools.py

The messages initialized in this module is not passed to T. Thus such as the message 'Registration needs verification' can not be translated. Please visit and register and login before mail address verification at 'https://masel-style.appspot.com/questions/client/person', where every thing is in J

[web2py] Re: pending issues?

The Resources > Documentation menu in the Welcome app is missing a link for ch. 13 in the book. To add it, you can insert the following line between lines 99 and 100 of /welcome/models/menu.py: (T('Components and Plugins'), False, 'http://www.web2py.com/book/default/chapter/13'), Ant

Re: [web2py] localize messges in gluon/tools.py

On Feb 3, 2011, at 3:43 PM, kawate wrote: > > The messages initialized in this module is not passed to T. > Thus such as the message 'Registration needs verification' can not be > translated. > Please visit and register and login before mail address verification > at 'https://masel-style.appspot.

[web2py] plugin_wiki routes.py

The default URL's when using plugin_wiki are ugly: /welcome/plugin_wiki/page/about Does anyone have a good routes.py for this?

[web2py] Simple question on rocket server - how to disable httpserver.log

Can I disable httpserver.log when running in development mode? I tried to change main.appfactory, but I messed it up, I also tried options.py and does not works. Can it be done? Thanks -- Bruno Rocha http://about.me/rochacbruno/bio

[web2py] Re: Multiple users on computer and authorization with Janrian (RPX)

Sorry, I didn't explain well enough. The clean_session() function is something I wrote to reset all session variables in the case the user is a different person logging in from the same machine. So it contains lines like: session.var1 = None session.dict1 = {} etc. The nutshell is an expressi

[web2py] Few general questions

Hi, I have a few general questions, answers for which I didn't find in the book: 1. How does the model work in web2py's MVC? What is the workflow? When does the code from those files called? The only relevant information I found was the sequence diagram from the book. 2. How does the following form

[web2py] Re: Multiple users on computer and authorization with Janrian (RPX)

Thanks a lot, could you post the complete code of your clean_session()? (Why is session.forget is not sufficient?) You also mentioned the placement of the above code in a model, why not in a controller within the logout? On Feb 4, 4:09 am, ron_m wrote: > Sorry, I didn't explain well enough. > >

[web2py] Re: background task error

Could someone else on a Mac give this a try to see if it works? I'm still not able to run Web2py from the command line: In Terminal in web2py.app/Contents/Resources, try: $ python web2py.py I continue to get this error on two different Macs: localhost:Resources user$ python web2py.py Traceback

[web2py] Re: Multiple users on computer and authorization with Janrian (RPX)

session.forget() will prevent you from adding to the session from that line forward because it inhibits storing of the session to the file at the end of the request. I only wanted to remove session variables if the new user was not the same as the previous use logged into the application from th

[web2py] Re: Checking permissions on a group

please check it in trunk. On Feb 3, 11:10 am, Jonathan Lundell wrote: > On Feb 3, 2011, at 6:14 AM, Franzé Jr wrote: > > > > > > > > > > > On Thu, Feb 3, 2011 at 11:08 AM, Clayton wrote: > > Hello, > > > I can't seem to find an easy way to check if a *group* has a > > permission without making m

[web2py] Re: Simple question on rocket server - how to disable httpserver.log

try web2py.py -l '' On Feb 3, 7:37 pm, Bruno Rocha wrote: > Can I disable httpserver.log when running in development mode? > > I tried to change main.appfactory, but I messed it up, I also tried > options.py and does not works. > > Can it be done? > > Thanks > > -- > Bruno Rochahttp://about.m

Re: [web2py] Re: Checking permissions on a group

On Feb 3, 2011, at 8:00 PM, Massimo Di Pierro wrote: > > please check it in trunk. That looks about right. No log for the group case, but I don't think that a log here is all that important anyway. > > On Feb 3, 11:10 am, Jonathan Lundell wrote: >> On Feb 3, 2011, at 6:14 AM, Franzé Jr wrote:

[web2py] Re: Few general questions

On Feb 3, 8:27 pm, devGS wrote: > Hi, I have a few general questions, answers for which I didn't find in > the book: > 1. How does the model work in web2py's MVC? What is the workflow? When > does the code from those files called? The only relevant information I > found was the sequence diagram fr

Re: [web2py] Re: Need help in standardizing my coding and naming schemes before I start my main project

How about you show me couple (say 5) of the database structures of the applications that you have already written? I can go through it and get some practical ideas.

[web2py] Not a bug, but

When you create a new application with the wizard and you get to Step 1: Setting Parameters fields you fill out with parameters are little bit small, especially Database Uri: and Security Key: The preview of the selected layout could also be a little bit bigger. Kenneth

[web2py] Unable to run web2py from Mac command line

I am getting "No module named gluon.widget" when trying to run web2py from the command line on a Mac. Double-clicking web2py.app works fine. Does double-clicking the app add some sort of path? I have other versions of Python on my Mac. Should web2py be running off the Python that comes in the d

[web2py] Re: Unable to run web2py from Mac command line

My guess is that you downloaded the Mac Binary distribution. You have to run it as a mac app with open web2py.app if you want to run with your own python from command line, you must get the source distribution. On Feb 3, 11:48 pm, pbreit wrote: > I am getting "No module named gluon.widget" when

[web2py] Re: Unable to run web2py from Mac command line

I should mention that I have tried on two different Macs and I have tried both the Current Download and the Nightly Build.

[web2py] Re: Unable to run web2py from Mac command line

OK, thanks, that must be it. I noodled around with Snow Leopard python in order to run Fabric from my Mac.

[web2py] Re: Redirect after GAE authorization.

My previous post has look ambiguous enough. I use GAE to run my web2py application.

[web2py] Re: powertable problem

Kenneth -> i just copy the code from a powertable example app (web2py.app.skrywer_powertable.w2p) now i try to delete ".load" Bruno Rocha -> i download it yesterday from your website http://powertable.blouweb.com/ , now i try to re-download the plugin from bitbucket thanks for help! Bruno Rocha

Re: [web2py] Re: order by surname, name

On 3 February 2011 16:49, Marin Pranjic wrote: > + you can use ~ to reverse order. > > > http://web2py.com/book/default/chapter/06#orderby,-groupby,-limitby,-distinct > > > On Thu, Feb 3, 2011 at 2:21 PM, dederocks wrote: > >> Hi Johann, >> >> Just use "|": >> orderby=db.table.name|db.table.surn