[Zope] (no subject)

[lukesh at seznam.cz]

>From nobody Mon Sep 15 09:08:52 2003
Received: from unknown (HELO mail.python.org) (12.155.117.29)
  by zulu.avenirsolutions.com with SMTP; 15 Sep 2003 10:47:14 -0000
Received: from localhost.localdomain ([127.0.0.1] helo=mail.python.org)
	by mail.python.org with esmtp (Exim 4.22)
	id 19yrss-0003oy-BA; Mon, 15 Sep 2003 07:51:10 -0400
Received: from stateless1.tiscali.cz ([213.235.135.70] helo=mail.tiscali.cz)
	by mail.python.org with esmtp (Exim 4.22) id 19yrsn-0003os-QY
	for zope at zope.org; Mon, 15 Sep 2003 07:51:05 -0400
Received: from gw (212.11.110.82) by mail.tiscali.cz (6.7.018)
	id 3F269CE000C0AC0D; Mon, 15 Sep 2003 13:45:06 +0200
Message-ID: <3F269CE000C0AC0D at stateless1.tiscali.cz> (added by
	postmaster at mail.tiscali.cz)
From: "Jaroslav Lukesh" <lukesh at seznam.cz>
To: <zope at zope.org>,
	"Sinclair" <fred.duwez at freesurf.fr>
Subject: Re: [Zope] Re: Re: [Security] How to encrypt a Zope oid ?
Date: Mon, 15 Sep 2003 12:06:47 +0200
X-FeelingPriority: Normal
X-Priority: 3
X-Mailer: Muj vlastni Mail klient 1.00     
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-2
Content-Transfer-Encoding: Quoted-Printable
X-Spam-Status: OK (zopelist 0.000)
Cc: 
X-BeenThere: zope at zope.org
X-Mailman-Version: 2.1.2+
Precedence: list
Reply-To: lsh at wo.cz
List-Id: Users of the Z Object Publishing Environment <zope.zope.org>
List-Unsubscribe: <http://mail.zope.org/mailman/listinfo/zope>,
	<mailto:zope-request at zope.org?subject=unsubscribe>
List-Archive: <http://lists.zope.org/pipermail/zope>
List-Post: <mailto:zope at zope.org>
List-Help: <mailto:zope-request at zope.org?subject=help>
List-Subscribe: <http://mail.zope.org/mailman/listinfo/zope>,
	<mailto:zope-request at zope.org?subject=subscribe>
Sender: zope-bounces at zope.org
Errors-To: zope-bounces at zope.org

> Odes=EDlatel: Sinclair <fred.duwez at freesurf.fr>
> OK, but with Zope, you can build a application controller who call deco=
de
> parameters and call the real zope object. Or a simple page page
controller
> who encrypt his parameters :
>=20
> Example : a document has url :
>  $ZOPE/.../document_manager/document_37.
>=20
> I wish the displayed url looks like :
> $ZOPE/.../document_manager?document=3Dk2316fge54dsgb51v3vsdv4
>=20
> That is the document_manager who translates an unreadable parameter to
> document real url.

Unreadable? Not available... But you could use POST request method with u=
se
of hidden form field. But I have tool for download these pages too. So yo=
u
will block only lamers, some search engines does hidden fields form
submitting too.

Regards JL.

_______________________________________________
Zope maillist  -  Zope at zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )