[Modeling-cvs] ZModeling/ZModelizationTool/dtml ZModelizationTool_addForm.dtml,1.1.1.1,1.2 explainMo
Status: Abandoned
Brought to you by:
sbigaret
From: <sbi...@us...> - 2003-09-07 13:51:47
|
Update of /cvsroot/modeling/ZModeling/ZModelizationTool/dtml In directory sc8-pr-cvs1:/tmp/cvs-serv2635/ZModelizationTool/dtml Modified Files: ZModelizationTool_addForm.dtml explainModelizationTool.dtml model_properties.dtml Log Message: ZModelizationTool: - model's props page update: Oracle supported in core. - Added the ability to load PyModels - Removed the useless contraints on the 'id' which formerly should be equal to 'modelization_tool' - Added a security warning: the ZModelizationTool product may be dangerous in a production environment. Index: ZModelizationTool_addForm.dtml =================================================================== RCS file: /cvsroot/modeling/ZModeling/ZModelizationTool/dtml/ZModelizationTool_addForm.dtml,v retrieving revision 1.1.1.1 retrieving revision 1.2 diff -C2 -d -r1.1.1.1 -r1.2 *** ZModelizationTool_addForm.dtml 30 Jul 2002 15:35:02 -0000 1.1.1.1 --- ZModelizationTool_addForm.dtml 7 Sep 2003 13:51:43 -0000 1.2 *************** *** 3,10 **** <BODY BGCOLOR="#FFFFFF" LINK="#000099" VLINK="#555555"> <H2>Add Modeling Tool</H2> <form action="manage_addZModelizationTool"><table> <tr><th>Id</th> ! <td><input type=hidden name=id value="modelization_tool"> ! <code>modelization_tool</code> </td> </tr> --- 3,20 ---- <BODY BGCOLOR="#FFFFFF" LINK="#000099" VLINK="#555555"> <H2>Add Modeling Tool</H2> + <p><table><tr> + <td><font color="FF0000">Security Warning!</font></td> + <td> + Please do not leave the <tt>ZModelizationTool</tt> product in a + production environment, especially now that it can load PyModel: PyModels + are evaluated through an <tt>exec</tt> statement, hence leaving the product + in a production environment may be a security hole (if you have ideas on how + this can be correctly handled, please + <a href="mailto:sbi...@us...">contact the maintainer</a>). + </td></tr></table> + <form action="manage_addZModelizationTool"><table> <tr><th>Id</th> ! <td><input type=text name=id value="modelization_tool"> </td> </tr> Index: explainModelizationTool.dtml =================================================================== RCS file: /cvsroot/modeling/ZModeling/ZModelizationTool/dtml/explainModelizationTool.dtml,v retrieving revision 1.1.1.1 retrieving revision 1.2 diff -C2 -d -r1.1.1.1 -r1.2 *** explainModelizationTool.dtml 30 Jul 2002 15:35:02 -0000 1.1.1.1 --- explainModelizationTool.dtml 7 Sep 2003 13:51:43 -0000 1.2 *************** *** 7,10 **** --- 7,21 ---- </p> + <p><table><tr> + <td><font color="FF0000">Security Warning!</font></td> + <td> + Please do not leave the <tt>ZModelizationTool</tt> product in a + production environment, especially now that it can load PyModel: PyModels + are evaluated through an <tt>exec</tt> statement, hence leaving the product + in a production environment may be a security hole (if you have ideas on how + this can be correctly handled, please + <a href="mailto:sbi...@us...">contact the maintainer</a>). + </td></tr></table> + <hr> <h3>Managed Models</h3> *************** *** 41,49 **** <td align=center valign=top> ! <h3>Import a model from XML</h3> <form action="manage_importModel" method="post" enctype="multipart/form-data"> <input type="file" name="file" size="25" value="" /><br> <input type="submit" value="Import"> </form> </td> </tr> --- 52,62 ---- <td align=center valign=top> ! <h3>Import a xml-model or a PyModel</h3> <form action="manage_importModel" method="post" enctype="multipart/form-data"> <input type="file" name="file" size="25" value="" /><br> <input type="submit" value="Import"> </form> + <b>Note:</b> to be successfully imported a pymodel should define a global + variable <tt>model</tt> containing the PyModel. </td> </tr> Index: model_properties.dtml =================================================================== RCS file: /cvsroot/modeling/ZModeling/ZModelizationTool/dtml/model_properties.dtml,v retrieving revision 1.10 retrieving revision 1.11 diff -C2 -d -r1.10 -r1.11 *** model_properties.dtml 12 Jun 2003 00:28:25 -0000 1.10 --- model_properties.dtml 7 Sep 2003 13:51:43 -0000 1.11 *************** *** 22,26 **** <th align="left">adaptorName</th> <td><input type="text" name="adaptorName" value="&dtml-adaptorName;"/></td> ! <td align="left"><font size="-1">Currently supported: Postgresql, MySQL, SQLite (exact typo!!)</font></td> </tr> <tr> --- 22,26 ---- <th align="left">adaptorName</th> <td><input type="text" name="adaptorName" value="&dtml-adaptorName;"/></td> ! <td align="left"><font size="-1">Currently supported: MySQL, Oracle, Postgresql, SQLite (exact typo!!)</font></td> </tr> <tr> |