Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 145 of 807  Not logged in ELOG logo
New entries since:Thu Jan 1 01:00:00 1970
ID Date Icon Author Author Email Category OS ELOG Version Subjectdown
  1163   Mon May 30 20:16:11 2005 Reply Stefan Rittstefan.ritt@psi.chRequestWindows2.5.8-6Re: password encryption

Emiliano Gabrielli wrote:

I don't have double checked .. but .. why we need to pass the sensible information in the Query String ??
Are you sure that putting it in an hidden field (and eventualli using a GET methon in the <form>-tag) can't be a solution?


Hidden means only these fields are not shown in the form, but they are added to the URL in the same way as non-hidden fields. But I got another idea: I will try to use a POST form instead of the GET form. Using the POST method, fields are attached to the request and not present in the URL. Hope this will work. When I find some time to work on it I will let you know.
  1164   Tue May 31 09:07:37 2005 Agree Alex Halex@synergie-inf.comRequestWindows2.5.8-6Re: password encryption
Thanks Stefan 8)
  1176   Sat Jun 4 14:00:17 2005 Reply Stefan Rittstefan.ritt@psi.chRequest 2.5.8-6Re: password encryption

Alex H wrote:
I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex


I switched the login page to the HTTP "POST" method, where arguments are not passed in the URL.

The new version is under CVS. Can you try if the behaviour is better now? I upgraded also the ELOG forum, so you can try there as well.
  67976   Tue Jun 9 15:44:49 2015 Reply Stefan Rittstefan.ritt@psi.chBug fixAll3.1.0Re: parse a correctly the username in save_user_config when using Webserver authentication

Hi Christof,

thanks for the patch, I merged it into the current HEAD.

/Stefan

Christof Hanke wrote:

Hi Stefan,

 

When we use Webserver authentication, we have the correct username already in the variable http_user.

The old way of copying this http_user to "user" is wrong since we don't use the size of http_user.

Instead, just encode the http_user variable directly.

See attached patch against git HEAD.

Christof

 

 

  1507   Tue Nov 15 08:40:31 2005 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2.6.0-4Re: page2?cmd=List does not show next page

Oleg Solovyanov wrote:
Maybe I'm doing something wrong, but the following does not work on a Elog with multiple pages:

1. View message
2. Click List
3. Click Next or page number
4. Only the last page is shown

It looks like the URL pageN?cmd=List does not work, while pageN works.

Any hints?

Same behaviour can be seen also with Discussion forum on Elog site.


I don't understand. I tried on the Discussion forum:

1. View message, for example http://midas.psi.ch/elogs/Forum/1506

2. Click List, which takes me to http://midas.psi.ch/elogs/Forum/

3. Click Next, which takes me to http://midas.psi.ch/elogs/Forum/page2

Then I really see page2, not the last page. So what do you do differently?
  1510   Wed Nov 16 15:24:53 2005 Reply Oleg SolovyanovOleg.Solovyanov@ihep.ruBug reportLinux2.6.0-4Re: page2?cmd=List does not show next page

Stefan Ritt wrote:

Oleg Solovyanov wrote:
Maybe I'm doing something wrong, but the following does not work on a Elog with multiple pages:

1. View message
2. Click List
3. Click Next or page number
4. Only the last page is shown

It looks like the URL pageN?cmd=List does not work, while pageN works.

Any hints?

Same behaviour can be seen also with Discussion forum on Elog site.


I don't understand. I tried on the Discussion forum:

1. View message, for example http://midas.psi.ch/elogs/Forum/1506

2. Click List, which takes me to http://midas.psi.ch/elogs/Forum/

3. Click Next, which takes me to http://midas.psi.ch/elogs/Forum/page2

Then I really see page2, not the last page. So what do you do differently?


Somehow in my logbooks List command would add cmd=List to the URL
And this does not work...
  1511   Wed Nov 16 15:27:40 2005 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2.6.0-4Re: page2?cmd=List does not show next page

Oleg Solovyanov wrote:
Somehow in my logbooks List command would add cmd=List to the URL
And this does not work...


You use an old version of elog. Please upgrade to the 2.6.0-beta5 which you can obtain from

http://savannah.psi.ch/viewcvs/trunk/src/elogd.c?root=elog&rev=1541
  1513   Thu Nov 17 23:40:10 2005 Reply Oleg SolovyanovOleg.Solovyanov@ihep.ruBug reportLinux2.6.0-4Re: page2?cmd=List does not show next page

Stefan Ritt wrote:

Oleg Solovyanov wrote:
Somehow in my logbooks List command would add cmd=List to the URL
And this does not work...


You use an old version of elog. Please upgrade to the 2.6.0-beta5 which you can obtain from

http://savannah.psi.ch/viewcvs/trunk/src/elogd.c?root=elog&rev=1541


Yes, new version seems to fix this bug, but...

Now there's a new feature: sometimes it breaks the text message line into 2 when
displaying the summary page.
Maybe it happens only with Russian text Smile
ELOG V3.1.5-3fb85fa6