Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
icon1.gif   Can't set Author attribute properly in reply?, posted by Chris Green on Mon Jul 25 23:39:16 2005 
    icon1.gif   Re: Can't set Author attribute properly in reply?, posted by Emiliano Gabrielli on Tue Jul 26 10:00:34 2005 
    icon1.gif   Re: Can't set Author attribute properly in reply?, posted by Stefan Ritt on Tue Jul 26 10:02:58 2005 
       icon1.gif   Re: Can't set Author attribute properly in reply?, posted by Emiliano Gabrielli on Tue Jul 26 10:49:12 2005 
          icon2.gif   Re: Can't set Author attribute properly in reply?, posted by Stefan Ritt on Tue Jul 26 10:51:12 2005 
             icon2.gif   Re: Can't set Author attribute properly in reply?, posted by Emiliano Gabrielli on Tue Jul 26 10:55:03 2005 
                icon2.gif   Re: Can't set Author attribute properly in reply?, posted by Stefan Ritt on Tue Jul 26 10:59:45 2005 
                   icon2.gif   Re: Can't set Author attribute properly in reply?, posted by Emiliano Gabrielli on Tue Jul 26 12:02:35 2005 
    icon7.gif   Re: Can't set Author attribute properly in reply?, posted by Chris Green on Tue Jul 26 17:32:59 2005 
Message ID: 1326     Entry time: Tue Jul 26 10:55:03 2005     In reply to: 1325     Reply to this: 1327
Icon: Reply  Author: Emiliano Gabrielli  Author Email: AlberT@SuperAlberT.it 
Category: Question  OS: Linux  ELOG Version: 2.6.0b 
Subject: Re: Can't set Author attribute properly in reply? 

Stefan Ritt wrote:

Emiliano Gabrielli wrote:
Substitute is the only way I have to be assure it is as I want ...


No, that's not true. A
Locked attributes = Author

will do the job as well.


I can't argue how it works ...
The following code will assure that, if the HTML generated by elog would be modified by hand by a malicious user the server can still preset the author field with the right $long_name?
Locked attributes = Author
Preset on Reply Author = $long_name

how works in details the "Locked Attribute" parameter then ?? ...
ELOG V3.1.5-fe60aaf