This tripped my spam filter. =)

Phyo Arkar wrote:
> Here is how Admin working on over mod_wsgi :
>
>
>
>
>
> WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING
> THIS IS A BIG SECURITY RISK ENABLING WEB2PY ADMIN TO PUBLIC
> WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING
> THIS IS A BIG SECURITY RISK ENABLING WEB2PY ADMIN TO PUBLIC
> WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING
> THIS IS A BIG SECURITY RISK ENABLING WEB2PY ADMIN TO PUBLIC
>
>
> start web2py :
> python web2py.py -i 0.0.0.0 <http://0.0.0.0> -p 9090 -a 'yourpasshere' &
>
>
>
> heres the patch:
> $diff /opt/web2py/applications/admin/controllers/admin-patch.py  
> /opt/web2py/applications/admin/controllers/default.py
>
> 34,35c34,35
> < #elif not remote_addr in hosts:
> < #    raise HTTP(200,T('Admin is disabled because unsecure channel'))
> ---
> > elif not remote_addr in hosts:
> >     raise HTTP(200,T('Admin is disabled because unsecure channel'))
>
>
>
> On Tue, Oct 7, 2008 at 3:27 PM, mdipierro <[EMAIL PROTECTED] 
> <mailto:[EMAIL PROTECTED]>> wrote:
>
>
>     You are right.
>
>     On Oct 7, 9:38 am, yarko <[EMAIL PROTECTED]
>     <mailto:[EMAIL PROTECTED]>> wrote:
>     > Would it make sense, as we go forward, to put default patterns for
>     > deployment on GAE for those apps that work / should work there?
>     >
>     > That is,   try.... for gae  containing session.forget() w/
>     > comments....
>     >
>     > At least this way people who casually try would experience some
>     > successes before they come to asking questions...
>     >
>     > On Oct 7, 12:44 am, mdipierro <[EMAIL PROTECTED]
>     <mailto:[EMAIL PROTECTED]>> wrote:
>     >
>     > > You are correct that "welcome" does not work unless you place
>     >
>     > > session.forget()
>     >
>     > > somewhere in the default controller. Could you give this a try?
>     >
>     > > Reddish works for me. What error do you see in the logs?
>     >
>     > > On Oct 7, 12:20 am, MHblue <[EMAIL PROTECTED]
>     <mailto:[EMAIL PROTECTED]>> wrote:
>     >
>     > > > Hi Massimo,
>     >
>     > > > Thanks for the reply! I was aware that not all of the
>     functionality
>     > > > was to be present, but I was surprised that reddish doesn't work
>     > > > because I knew it was built to work with GAE.
>     >
>     > > > Since it can't write to disk in GAE, there's no way to see
>     the errors
>     > > > (is there a way to set it to display errors even without admin
>     > > > access?). The only clue is that when I try to access
>     /welcome/ it says
>     > > > Ticket issued: unrecoverable, while accessing "reddish"
>     gives Ticket
>     > > > issued: unknown. Non-existent urls say "Invalid request".
>     >
>     > > > Other than that I am not sure what to try. I did clean
>     another clean
>     > > > install from the SVN Trunk of web2py (and still the web
>     interface
>     > > > tells me I should upgrade..?) and downloaded reddish from
>     the google
>     > > > groups link.
>     >
>     > > > Cheers,
>     >
>     > > > Matt
>     >
>     > > > On Oct 6, 8:22 pm, mdipierro <[EMAIL PROTECTED]
>     <mailto:[EMAIL PROTECTED]>> wrote:
>     >
>     > > > > Hi MH,
>     >
>     > > > > Admin, examples and appadmin are not supposed to work
>     because they
>     > > > > require access to the filesystem. You can use them locally for
>     > > > > development but not when running GAE, not even on emulation.
>     >
>     > > > >http://127.0.0.1:8017/welcome
>     > > > > andhttp://127.0.0.1:8017/reddish
>     <http://127.0.0.1:8017/reddish>
>     >
>     > > > > work fine as far as I know but I will double check tomorrow.
>     > > > > Google has recently updated the GAE and some things have
>     changed.
>     >
>     > > > > Massimo
>     >
>     > > > > On Oct 6, 6:53 pm, MHblue <[EMAIL PROTECTED]
>     <mailto:[EMAIL PROTECTED]>> wrote:
>     >
>     > > > > > I'm unable to get web2py working at all using the GAE
>     development
>     > > > > > server. This is my first web2py install. I downloaded
>     the latest trunk
>     > > > > > (when I log in it says web2py Version 1.43 (2008-09-22
>     11:22:03)).
>     > > > > > Starting web2py directly ("python web2py.py") works fine
>     -- I can
>     > > > > > browse the admin interface etc. without any problem.
>     >
>     > > > > > But here are various URLs and the error message I
>     receive on port
>     > > > > > 8017, which I have my local GAE development server running:
>     >
>     > > > > >http://127.0.0.1:8017/admin/default/site
>     > > > > >   admin disabled because unable to access password file
>     >
>     > > > >
>     >http://127.0.0.1:8017sendsmetohttp://127.0.0.1:8017/welcome/default/i..
>     <http://127.0.0.1:8017/welcome/default/i..>.,
>     > > > > > then:
>     >
>     > > > > >   Internal error
>     > > > > >   Ticket issued: unrecoverable
>     >
>     > > > > > I tried copying the "reddish" app into the
>     "applications" folder,
>     > > > > > figuring that this would at least have all the necessary
>     configs in
>     > > > > > place to work with GAE.
>     >
>     > > > > >http://127.0.0.1:8017/reddish/
>     > > > > >   Internal error
>     > > > > >   Ticket issued: unknown
>     > > > > >     (click on unknown: admin disabled because unable to
>     access
>     > > > > > password file)
>
>
>
> >

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"web2py Web Framework" group.
To post to this group, send email to web2py@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en
-~----------~----~----~----~------~----~------~--~---

begin:vcard
fn:Timothy Farrell
n:Farrell;Timothy
org:Statewide General Insurance Agency;IT
adr:;;4501 East 31st Street;Tulsa;OK;74135;US
email;internet:[EMAIL PROTECTED]
title:Computer Guy
tel;work:(918)492-1446
url:www.swgen.com
version:2.1
end:vcard

Reply via email to