Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
Message ID: 65883     Entry time: Thu May 15 18:36:55 2008
Icon: Question  Author: Devin Bougie  Author Email: dab66@cornell.edu 
Category: Bug report  OS:   ELOG Version:  
Subject: reset password link when using proxy 

For heightened security, we allow access to our ELOG installation from offsite through an apache proxy.  Therefore, the URL for our ELOG becomes http://www.lepp.cornell.edu/proxy/elog/ .  Everything seems to work properly with this setup except for the "reset password" utility.  When trying to reset ones password, the link sent in the "Password recovery" email becomes, for example:

http://www.lepp.cornell.edu/proxy/elog/ERL+W128/?redir=%3Fcmd%3DChange+password...

When using this link, the redirect redirects you to:

http://www.lepp.cornell.edu/ERL+W128/?cmd=Change%20password...

Which does not work.  Instead, the redirect should point to:

 

http://www.lepp.cornell.edu/proxy/elog/ERL+W128/?cmd=Change%20password...

Any suggestions or workarounds would be greatly appreciated.
 
Many thanks,
Devin

 

ELOG V3.1.5-fe60aaf