Re: COREBlog 1.22 released

Bogdan Maryniuk <[email protected]>
Newsgroups gmane.comp.python.zope.coreblog.english
Message-ID <[email protected]>
Hi. :)

On Thu, Nov 17, 2005 at 06:09:28PM +0900, Atsushi Shibata wrote:
> You can randomize CAPTCHA codes , preparing set of CAPTCHA image and 
> hidden field or SESSION.

You *really* don't want to initialize session without any purpose until you're
not logged in. Moreover, it is possible to exploit you with a script, which will 
learn all your prepared images and will fill up your blog with a fortune's
comments.

> PIL is a "external" module, requires building binary codes.
> I think all the COREBlog1 features sould work without any external 
> module.

Right. Therefore you *really* want to implement captcha feature in the CB.
The code would be (idea-only):


try:
    import PIL.Image
    CAPTCHA_ENABLE = 1
except ImportError:
    CAPTCHA_ENABLE = None



class COREBlog:

    ...

    def captchaEnable(self, **kw):
        """
        Return boolean of captcha feature availability.
        """

        return CAPTCHA_ENABLE


Then in DTML:

    <dtml-if captchaEnable>
      Use captcha feature: <input type="checkbox" name="use_captcha">
    <dtml-else>
      You need <a href="http://www.pythonware.com/">Python Image Library</a> 
      installed for captcha feature.
    </dtml-if>


> If you need some additional feature, you can do by your hand.
> Write How to, then you will become a hero !
> That's open source way, I think ;-).

I can implement it as a patch to CB and send it to you. No hero status is
needed. However, as much as I remember, you never answer my mails with 
suggestions about CB. :-)

> Please, no flames about my bad English (sorry!).

Anata no eigo wa kawai desu ne! :)

-- 
暮

Mosher's Law of Software Engineering:
        Don't worry if it doesn't work right.
        If everything did, you'd be out of a job.
_______________________________________________
COREblog-en mailing list
COREblog-en-/9qXvnWia/9Wk0Htik3J/[email protected]
http://postaria.com/cgi-bin/mailman/listinfo/coreblog-en
Unsubscription writing to coreblog-en-leave-/9qXvnWia/9Wk0Htik3J/[email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.