[web2py] Re: session security issue?

2014-03-03 Thread Kiran Subbaraman
I see this in 2.9.2 too (Just tested with the latest release) On Monday, March 3, 2014 1:25:14 PM UTC+5:30, Kiran Subbaraman wrote: > > Hello, > I noticed this issue recently related to user session data. > In my application I store some user specific session data, so that I do > not have to hi

[web2py] Best way to use a standalone DAL

2014-03-03 Thread Gwayne aka Mike Veltman
I will actually call dal from within some scripts and from the webgui. What would be the best and cleanest way to do that ? -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (R

[web2py] virtual field ordered on grid

2014-03-03 Thread 黄祥
hi, just wondering why the virtual field ordered on grid is not follow as defined in the models. e.g. *models/db.py* db.define_table('product', Field('name'), Field('beginning_cost', 'integer'), Field('beginning_quantity', 'integer'), Field.Virtual('beginning_inventory', lambda row: row.produ

[web2py] sqlform.grid - is there a way to set a column to certain value when entering new rows?

2014-03-03 Thread Dragan Matic
I have a grid and would like to show only rows where mytable.my_column == certain value form = SQLFORM.grid(db.my_table.my_column == my_value) and I would also like that every new row has the same predefined value. Is there a way to say to a grid that every new row should have my_val

[web2py] Re: field inheritance

2014-03-03 Thread mcamel
It works fine! Just one thing: label attribute seems to be precalculated when you define the field (sure this is the reason it has not been internationalized), so if you change the name, you'd probably want to change its label too: db.mytable.myfield.clone(name='newname', label='newlabel') Th

[web2py] Re: sqlform.grid - is there a way to set a column to certain value when entering new rows?

2014-03-03 Thread 黄祥
just a suggestion, why not using default in table field constructor? e.g. db.define_table('person',Field('name',*default='name'*),format='%(name)s') ref: http://web2py.com/books/default/chapter/29/06/the-database-abstraction-layer#Record-representation best regards, stifan -- Resources: - htt

[web2py] Re: run web2y scheduler instances on 2 or more servers

2014-03-03 Thread Andrey K
Wow, what an answer! Niphlod, thanks a lot for such a detailed info with examples - now it is crystal clear for me. Very great help, really appreciate it!!! You answer make me clarify the future architecture for my app. Before I thought to use amazon internal tools for task distribution now I

[web2py] Re: Date format and date picker

2014-03-03 Thread mcamel
I'm not sure to understand your problem, but just in case it helps: have you tried to use this in your language file: '%Y-%m-%d': '%d/%m/%Y', Default date validator will do inner convertions between both formats, so you'll have no problems with DAL and database backend. Regards. El sábado, 1

[web2py] Re: SQLFORM.grid pagination and messed up URL

2014-03-03 Thread mcamel
Anthony, Would you mind to make a patch to the manual to clarify this thing?. Actual explanation is quite obscure and i'm not sure to understand completely what it means: the args argument of the grid specifies which request.args should be passed > along and ignored by the object Regards.

[web2py] Re: sqlform.grid - is there a way to set a column to certain value when entering new rows?

2014-03-03 Thread Dragan Matic
It shouldn't always be the same value, but is based on a certain condition. If for instance user chooses to view rows where value is '1', then every new row inserted should also have the value of '1'. On Monday, March 3, 2014 12:29:08 PM UTC+1, 黄祥 wrote: > > just a suggestion, why not using de

Re: [web2py] pg8000 driver that comes with web2py 2.8.2 is not supporting JSON field type?

2014-03-03 Thread Massimo Di Pierro
I agree with Niphlod. I do not like packages that need to be installed to work and explicit relative imports is better than absolute imports. Yet, this is not the only package we had to tweak to include in contrib. So this may come up again. Any objection to include contrib in sys.path? On Sunda

[web2py] Re: sqlform.grid - is there a way to set a column to certain value when entering new rows?

2014-03-03 Thread Anthony
You can dynamically change the default value of a field at any time: db.my_table.my_column.default = 'my default' Anthony On Monday, March 3, 2014 8:07:57 AM UTC-5, Dragan Matic wrote: > > It shouldn't always be the same value, but is based on a certain > condition. If for instance user chooses

[web2py] Re: session security issue?

2014-03-03 Thread Massimo Di Pierro
I will check and release a patch soon. Please do not discuss possible security issues on this mailing list. Report them to the developers directly. On Monday, 3 March 2014 02:06:05 UTC-6, Kiran Subbaraman wrote: > > I see this in 2.9.2 too (Just tested with the latest release) > > On Monday, Mar

Re: [web2py] Re: session security issue?

2014-03-03 Thread Marin Pranjić
Isn't this why session.renew() was added? On Mon, Mar 3, 2014 at 2:29 PM, Massimo Di Pierro < massimo.dipie...@gmail.com> wrote: > I will check and release a patch soon. Please do not discuss possible > security issues on this mailing list. Report them to the developers > directly. > > > On Mond

[web2py] Implementing search function in web2py

2014-03-03 Thread Avik Chatterjee
Disclaimer: I know this question has been asked a lot, and I am fairly new to programming. I have searched for some time in this forum and in the web on how to create a search option in the index page where people can search for a keyword appearing in the title or the body of a blog post that I

Re: [web2py] Re: session security issue?

2014-03-03 Thread Massimo Di Pierro
This is a tricky issue. Consider the case of amazon.com, you can add stuff to cart before you login and after you login it remembers your cart. Even if it logs you out, you can still add items to your cart. In a sense that information leaks (although the term leak is not appropriate here) . we

Re: [web2py] Re: session security issue?

2014-03-03 Thread Massimo Di Pierro
There is a solution in trunk which consists of ignoring the user preferences (auth.settings.renew_onlogout) and always reset all session variables (not only those associated to the user) when the user is automatically logged out. I believe this is how most users expect this to work. I will post

[web2py] web2py-mini-conference, May 4, 2014

2014-03-03 Thread Massimo Di Pierro
We have a date, a location, and a web site: http://www.experts4solutions.com/web2py_conference Please register if you plan to attend. The more the merrier. We are looking for sponsors. Massimo -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/w

[web2py] Re: Best way to use a standalone DAL

2014-03-03 Thread Jim S
Have you checked this out? http://web2py.com/books/default/chapter/29/06/the-database-abstraction-layer#Using-DAL-without-define-tables -Jim On Monday, March 3, 2014 2:58:39 AM UTC-6, Gwayne aka Mike Veltman wrote: > > I will actually call dal from within some scripts and from the webgui. > Wha

[web2py] Re: SQLFORM.grid pagination and messed up URL

2014-03-03 Thread Anthony
OK, I've tried to clarify a bit. Anthony On Monday, March 3, 2014 7:31:42 AM UTC-5, mcamel wrote: > > Anthony, > > Would you mind to make a patch to the manual to clarify this thing?. > > Actual explanation is quite obscure and i'm not sure to understand > completely what it means: > > the args

[web2py] Re: Best way to use a standalone DAL

2014-03-03 Thread Anthony
In a script, you can just import it like any other Python module. Not sure what you mean by calling it from "the webgui". Anthony On Monday, March 3, 2014 3:58:39 AM UTC-5, Gwayne aka Mike Veltman wrote: > > I will actually call dal from within some scripts and from the webgui. > What would be

[web2py] using requests library ques

2014-03-03 Thread Avi A
Hi, I need some help with implementing "requests" library. What I did: I have cloned the requests library to my app modules app. (didn't "install" anything) I tried these both options I found, one at a time: requests = local_import('requests') from modules import requests And in both cases I got:

[web2py] Re: using requests library ques

2014-03-03 Thread Anthony
Try just doing: import requests Anthony On Monday, March 3, 2014 11:15:33 AM UTC-5, Avi A wrote: > > Hi, > I need some help with implementing "requests" library. > What I did: > I have cloned the requests library to my app modules app. (didn't > "install" anything) > I tried these both options

[web2py] Re: using requests library ques

2014-03-03 Thread Avi A
Lol, that works. thanks. On Monday, March 3, 2014 6:20:55 PM UTC+2, Anthony wrote: > > Try just doing: > > import requests > > Anthony > > On Monday, March 3, 2014 11:15:33 AM UTC-5, Avi A wrote: >> >> Hi, >> I need some help with implementing "requests" library. >> What I did: >> I have cloned th

Re: [web2py] Re: session security issue?

2014-03-03 Thread Massimo Di Pierro
This is now posted in web2py 2.9.3-stable On Monday, 3 March 2014 09:30:28 UTC-6, Massimo Di Pierro wrote: > > There is a solution in trunk which consists of ignoring the user > preferences (auth.settings.renew_onlogout) and always reset all session > variables (not only those associated to the

Re: [web2py] web2py 2.9.2 is OUT

2014-03-03 Thread Massimo Di Pierro
fixed in web2py 2.9.3 On Sunday, 2 March 2014 20:59:51 UTC-6, Ovidio Marinho wrote: > > Ops, Button Administrative interface ins welcome.w2p, not work!!! > > > {{=T("Administrative > Interface")}} > > In the previous version is working well: > > {{block right_sidebar}} > {{=A(T("Administrat

[web2py] web2py 2.9.3 is OUT - INPORTANT SECURITY WARNING

2014-03-03 Thread Massimo Di Pierro
web2py 2.9.3 is OUT. As you can see from the changelog we fixed three issues with security of sessions. One of those issues is pretty serious (if you use sessions in DB). So, if you use sessions in DB (or GAE) you should upgrade immediately. Changelog: - jquery 1.11 - codemirror 3.21, thanks Pa

[web2py] ticket2db is not working

2014-03-03 Thread Rémy Reche
Hello, according to the documentation, I am trying to upload the error tickets in my database (MySQL) with this script: nohup python web2py.py -S myapp -M -R scripts/tickets2db.py & But I always obtain this error: Created by Massimo Di Pierro, Copyright 2007-2014 Version 2.8.2-stable+timesta

Re: [web2py] web2py-mini-conference, May 4, 2014

2014-03-03 Thread Nwachukwu Martin
Cool, I wish I could attend. It'll be fun, I know. On 3 March 2014 16:36, Massimo Di Pierro wrote: > We have a date, a location, and a web site: > > http://www.experts4solutions.com/web2py_conference > > Please register if you plan to attend. > The more the merrier. We are looking for spon

[web2py] Re: web2py-mini-conference, May 4, 2014

2014-03-03 Thread Anthony
Pizza...Pasta...Desserts. Is that the menu, or just subliminal messaging? ;-) On Monday, March 3, 2014 10:36:29 AM UTC-5, Massimo Di Pierro wrote: > > We have a date, a location, and a web site: > > http://www.experts4solutions.com/web2py_conference > > Please register if you plan to attend

[web2py] Re: sqlform.grid - is there a way to set a column to certain value when entering new rows?

2014-03-03 Thread Dragan Matic
I did not know that. Thanks. On Monday, March 3, 2014 2:24:49 PM UTC+1, Anthony wrote: > > You can dynamically change the default value of a field at any time: > > db.my_table.my_column.default = 'my default' > > Anthony > > On Monday, March 3, 2014 8:07:57 AM UTC-5, Dragan Matic wrote: >> >> It

[web2py] Re: web2py-mini-conference, May 4, 2014

2014-03-03 Thread Massimo Di Pierro
Subliminal messages. Now they are gone. Or perhaps there are more somewhere else. On Monday, 3 March 2014 11:00:01 UTC-6, Anthony wrote: > > Pizza...Pasta...Desserts. > > Is that the menu, or just subliminal messaging? ;-) > > > On Monday, March 3, 2014 10:36:29 AM UTC-5, Massimo Di Pierro wrote:

[web2py] Re: web2py 2.9.3 is OUT - INPORTANT SECURITY WARNING

2014-03-03 Thread 黄祥
can't start web2py windows binary on new version. the command prompt is appear and suddenly gone, and i can't access the web2py admin interface too. best regards, stifan -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) -

Re: [web2py] help with jsonrpc

2014-03-03 Thread Dave S
On Saturday, March 1, 2014 4:34:42 PM UTC-8, Trevor Overman wrote: > > Finally got things working. For anyone out there reading this, I fixed the > problem by utilizing urlfetch in GAE. > Works with curl, or works with your Android app? In either case, thanks for the update! /dps > @servic

[web2py] virtual field ordered on grid

2014-03-03 Thread Tim Richardson
Virtual fields are placed after real fields by default on the grids because they are not sortable (can't click on the field names at the top of the grid to sort) -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://

[web2py] MySQL and OperationalError: (2006, 'MySQL server has gone away')

2014-03-03 Thread jc
Hello, I have a low volume application running on a shared host. All seems ok except I am getting a lot - 260 in a week - of OperationalError's like this: Traceback (most recent call last): File "/home/tgaa/web2py/gluon/main.py", line 543, in wsgibase BaseAdapter.close_all_instances('rollb

[web2py] Re: Bootstrap3 package - help to test

2014-03-03 Thread Dmitry Rodetsky
Just set it up on my system. Found that the web2py logo was not showing up correctly in the corner. It had wrong top padding and a blue instead of white color when loading the default page. To fix this problem - you can go to the models/menu.py, and change the following from: response.logo = A

[web2py] Re: ticket2db is not working

2014-03-03 Thread Niphlod
do you have .table files inside the databases/ folder ? On Monday, March 3, 2014 5:27:10 PM UTC+1, Rémy Reche wrote: > > Hello, > > according to the documentation, I am trying to upload the error tickets > in my database (MySQL) with this script: > > nohup python web2py.py -S myapp -M -R script

Re: [web2py] pg8000 driver that comes with web2py 2.8.2 is not supporting JSON field type?

2014-03-03 Thread Niphlod
just be sure that the same sys.path is then in scheduler, shell, tests, and so on ^_^ BTW: from gluon.contrib import something should be the recommended way to import something from contrib let's not forget all the hassle we've been into dealing with from gluon import module vs import module

Re: [web2py] pg8000 driver that comes with web2py 2.8.2 is not supporting JSON field type?

2014-03-03 Thread Mariano Reingart
Including contrib in sys.path would be interesting but there could be collisions (for example, in this case, witch pg8000 will be imported: the one installed or the one in gluon.contrib?) Tony: there are other changes needed for web2py (see the diff for web2py DAL I've attached earlier), the most

[web2py] Re: run web2y scheduler instances on 2 or more servers

2014-03-03 Thread Niphlod
On Monday, March 3, 2014 1:10:08 PM UTC+1, Andrey K wrote: > > Wow, what an answer! Niphlod, thanks a lot for such a detailed info with > examples - now it is crystal clear for me. Very great help, really > appreciate it!!! > > You answer make me clarify the future architecture for my app. Befo

[web2py] Re: virtual field ordered on grid

2014-03-03 Thread 黄祥
yes, got it, but the virtual field is not in correct order yet. like in example above the result i got from the grid is (bold are virtual field) : id | name | beginning_cost | beginning_quantity | final_cost | actual_quantity | *actual_inventory *| *beginning_inventory* my expectation is (becaus

Re: [web2py] pg8000 driver that comes with web2py 2.8.2 is not supporting JSON field type?

2014-03-03 Thread Massimo Di Pierro
On Monday, 3 March 2014 14:26:15 UTC-6, Mariano Reingart wrote: > > Including contrib in sys.path would be interesting but there could be > collisions (for example, in this case, witch pg8000 will be imported: the > one installed or the one in gluon.contrib?) > That depends on the order in sys

[web2py] Re: virtual field ordered on grid

2014-03-03 Thread Anthony
I don't think the table stores information about the order of definition of virtual fields, so they will probably be displayed in arbitrary order unless you provide the "fields" argument. Anthony On Monday, March 3, 2014 3:42:59 PM UTC-5, 黄祥 wrote: > > yes, got it, but the virtual field is not

[web2py] Re: current trunk using memdb results in crash

2014-03-03 Thread Sebastian Cambeo
This error persists in the current stable version 2.9.3: If you want to reproduce it just uncomment the three memcache session lines: from gluon.contrib.memdb import MEMDB from google.appengine.api.memcache import Client session.connect(request, response, db = MEMDB(Client())) and the whole app

[web2py] Re: current trunk using memdb results in crash

2014-03-03 Thread David Manns
Its worse. If the memcache lines are commented out and the alternative line to connect and put tickets and sessions in the database, it still fails with both GAE SDK and production, this time with error ProtocolBufferEncodeError: int64 too big when executing session.connect(request, response,

Re: [web2py] Re: session security issue?

2014-03-03 Thread Kiran Subbaraman
Massimo, Point noted; will henceforth report to dev-list, if I come across such issues. Thanks for fixing this one. Kiran Subbaraman http://subbaraman.wordpress.com/about/ On Mon, 03-03-2014 6:59 PM, Massimo Di Pierro wrote: I will check and release a p

[web2py] Web2Py and custom modules (strange behavior and ValueError)

2014-03-03 Thread Remco K
Hi everyone, I'm trying to work with modules in Web2Py to define my objects/classes. First i used to use the models folder for this so i don't have to restart my project over and over again. >From a first point of view it's working and i can import my objects by adding an import statement to my

[web2py] Re: Web2Py and custom modules (strange behavior and ValueError)

2014-03-03 Thread Anthony
> > from gluon.custom_import import track_changes; track_changes(True) > > > statement before importing my modules, but is still need to restart Web2Py > for every change in development mode. I don't know what I'm doing wrong > here? > This is reportedly not working any more, though hasn't been

Re: [web2py] Re: session security issue?

2014-03-03 Thread Anthony
On Monday, March 3, 2014 6:41:52 PM UTC-5, Kiran Subbaraman wrote: > > Massimo, > Point noted; will henceforth report to dev-list, if I come across such > issues. > Better to email Massimo or another dev directly rather than post on any public list. Thanks. Anthony -- Resources: - http://w

Re: [web2py] Re: session security issue?

2014-03-03 Thread Kiran Subbaraman
Thanks Anthony. Will bear that in mind. Kiran Subbaraman http://subbaraman.wordpress.com/about/ On Tue, 04-03-2014 6:34 AM, Anthony wrote: On Monday, March 3, 2014 6:41:52 PM UTC-5, Kiran Subbaraman wrote: Massimo, Point noted; will henceforth r

[web2py] auth.define_tables(...signature=False): what is signature?

2014-03-03 Thread Tim Richardson
Hi. What does the signature parameter do in auth.define_tables? -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issues) --- You received this message because you are

[web2py] Re: Best way to use a standalone DAL

2014-03-03 Thread Gwayne aka Mike Veltman
O well the situation is as follows, I have a database and created a web2py webinterface with it. But I also have create some commandline tools that reverence the database. So I wondered if there was a easy way to include dal in the scripts and talk to the database. So webgui is the webinter

Re: [web2py] Re: Scheduler: new plugin cs_plugin_monitor

2014-03-03 Thread Andrey K
similar thing http://www.jetbrains.com/pycharm/webhelp/remote-debugging.html On Saturday, March 16, 2013 7:25:14 PM UTC+3, Niphlod wrote: > > a little offtopic but http://pydev.org/manual_adv_remote_debugger.html > > -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - ht

[web2py] Voting system without users.

2014-03-03 Thread Jason (spot) Brower
I was thinking of a voting system without users, but I wanted to get your opinions on what would be the best practice with this. In melodigram.com I have grams that each have their one unique id's and urls. They will be voted on by anyone. I imagine something like this: ---