[albatross-users] Upgrade problems to albatross 1.10pre2

Andrew McNamara andrewm at object-craft.com.au
Wed Jul 9 16:03:47 EST 2003


>OK, good suggestions. I have done this, and the output was as follows:
>
>os.getcwd() = /big/dom/xdomain/cgi-bin/qa_auth
>dirname = /

Okay - this means that load_page_module has been called with name="/login" - 
this means the page name extraction code in RandomPageModuleMixin.load_page() 
is buggy. Dave will look at this shortly, I hope.

Dave - we probably also need to add a check to ensure load_page_module
is never called with an absolute path - it's a security problem.

>    def __init__(self, base_url = 'mgr.py',
>                   page_path = '.',
>                   start_page = 'login',
>                   secret = '-=-secret-=-',
>                   session_appid = 'questadmin',
>                   session_dir = './sessions'):
>        Application.__init__(self, base_url)
>        PickleSignMixin.__init__(self, secret)
>        TemplateLoaderMixin.__init__(self, page_path)
>        RandomPageModuleMixin.__init__(self, page_path, start_page)
>        SessionFileAppMixin.__init__(self, session_appid, session_dir)
>
>Ah, actually I do see, there is a "page_path" and it is correct. The 
>pages are all in the same directory with the main app file.

As a workaround, can you try setting base_url to 'mgr.py/' (note the
addition of a slash to the end of the string)?

-- 
Andrew McNamara, Senior Developer, Object Craft
http://www.object-craft.com.au/



More information about the Albatross-users mailing list