Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 16 of 806  Not logged in ELOG logo
    icon2.gif   Re: password encryption, posted by Gary Clayson on Mon May 30 19:18:34 2005 
Hello Alex and Stefan,

I know of only one way to "hide" the text of the status bar in a web browser;
use JavaScript - specifically the status method (as in the following example):

<!-- the following goes in the body of the document, perhaps in a link. -->

<!-- sample link -->
<a href="javascript://place link url here"
onMouseOver="window.status='Status Bar Text Goes Here'; return true">Link Text Here</a>

<!-- place the following script in the head of the document -->
<script language="JavaScript" type="text/javascript"><!--
window.defaultStatus="Default Status Bar Text Here";
--></script>

Of course the above only works in those browsers that support javascripting,
but it is one way to hide the actual text of links from the user.
Hopefully this helps you!

Gary Clayson


Alex H wrote:
Hi Stefan,

I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex
    icon2.gif   Re: password encryption, posted by Emiliano Gabrielli on Mon May 30 19:56:01 2005 

Gary Clayson wrote:
Hello Alex and Stefan,

I know of only one way to "hide" the text of the status bar in a web browser;
use JavaScript - specifically the status method (as in the following example):

<!-- the following goes in the body of the document, perhaps in a link. -->

<!-- sample link -->
<a href="javascript://place link url here"
onMouseOver="window.status='Status Bar Text Goes Here'; return true">Link Text Here</a>

<!-- place the following script in the head of the document -->
<script language="JavaScript" type="text/javascript"><!--
window.defaultStatus="Default Status Bar Text Here";
--></script>

Of course the above only works in those browsers that support javascripting,
but it is one way to hide the actual text of links from the user.
Hopefully this helps you!

Gary Clayson


Alex H wrote:
Hi Stefan,

I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex


I don't have double checked .. but .. why we need to pass the sensible information in the Query String ??
Are you sure that putting it in an hidden field (and eventualli using a GET methon in the <form>-tag) can't be a solution?
    icon2.gif   Re: password encryption, posted by Stefan Ritt on Mon May 30 20:16:11 2005 

Emiliano Gabrielli wrote:

I don't have double checked .. but .. why we need to pass the sensible information in the Query String ??
Are you sure that putting it in an hidden field (and eventualli using a GET methon in the <form>-tag) can't be a solution?


Hidden means only these fields are not shown in the form, but they are added to the URL in the same way as non-hidden fields. But I got another idea: I will try to use a POST form instead of the GET form. Using the POST method, fields are attached to the request and not present in the URL. Hope this will work. When I find some time to work on it I will let you know.
    icon14.gif   Re: password encryption, posted by Alex H on Tue May 31 09:07:37 2005 
Thanks Stefan 8)
    icon2.gif   Re: password encryption, posted by Stefan Ritt on Sat Jun 4 14:00:17 2005 

Alex H wrote:
I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex


I switched the login page to the HTTP "POST" method, where arguments are not passed in the URL.

The new version is under CVS. Can you try if the behaviour is better now? I upgraded also the ELOG forum, so you can try there as well.
icon3.gif   Request: can the comment for a log book be put in the status bar on hover, posted by Tim Iskander on Wed Jul 6 16:02:30 2005 
We have several logbooks running here with somewhat cryptic names. The comment field for the
logbook describes its intent well enough, so the thought was that the comment could show up in the
status bar (or tooltip) when you hover over the logbook name in the tabs at the top of the page.

___ yea Smile

___ nea Frown

/Tim
icon5.gif   New Message Formatting and Default Settings, posted by Gary Clayson on Thu Jul 7 04:44:12 2005 
Hello All. Please Help! How can I turn off the formatting controls above the message text when making a new or reply entry? I included the flat 'Default Encoding = 1' in my config file, but it seems to have no effect. The log has been set up to suppress all email notification, as SMTP is not being used at my location (MS Exchange Server is being used). Also How can I turn off the icon selection panel to the left of a new message text box? And, finally, is it possible to turn off the Suppress Email notification checkbox AND not send emails? Forgive me for asking yet another - but the same question about turning off the Encoding buttons - Is there some method of setting I can enter into the config file to turn off the Encoding and default it to text entry only?

Forgive this entry being so long, I'm new to using ELOG; Thanks Stefan for an incredible application. Well thought out and elegant. Keep up the good work.

Gary ;->

PS Reworking the source code, then recompiling it, is not a viable option for me at this time.
    icon3.gif   Re: Request: can the comment for a log book be put in the status bar on hover, posted by Gary Clayson on Thu Jul 7 04:47:09 2005 

Tim Iskander wrote:
We have several logbooks running here with somewhat cryptic names. The comment field for the
logbook describes its intent well enough, so the thought was that the comment could show up in the
status bar (or tooltip) when you hover over the logbook name in the tabs at the top of the page.

___ yea Smile

___ nea Frown

/Tim


I wonder if there is any way to use the javascript 'window.status' method to accomplish this. It would be a nice addition when there are many logbooks.
Gary ;->
ELOG V3.1.5-3fb85fa6