Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 16 of 804  Not logged in ELOG logo
New entries since:Thu Jan 1 01:00:00 1970
ID Date Icon Author Author Email Categorydown OS ELOG Version Subject
  1161   Mon May 30 19:18:34 2005 Reply Gary Claysong_clayson@sbcglobal.netRequestWindows2.5.8-6Re: password encryption
Hello Alex and Stefan,

I know of only one way to "hide" the text of the status bar in a web browser;
use JavaScript - specifically the status method (as in the following example):

<!-- the following goes in the body of the document, perhaps in a link. -->

<!-- sample link -->
<a href="javascript://place link url here"
onMouseOver="window.status='Status Bar Text Goes Here'; return true">Link Text Here</a>

<!-- place the following script in the head of the document -->
<script language="JavaScript" type="text/javascript"><!--
window.defaultStatus="Default Status Bar Text Here";
--></script>

Of course the above only works in those browsers that support javascripting,
but it is one way to hide the actual text of links from the user.
Hopefully this helps you!

Gary Clayson


Alex H wrote:
Hi Stefan,

I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex
  1162   Mon May 30 19:56:01 2005 Reply Emiliano GabrielliAlberT@SuperAlberT.itRequestWindows2.5.8-6Re: password encryption

Gary Clayson wrote:
Hello Alex and Stefan,

I know of only one way to "hide" the text of the status bar in a web browser;
use JavaScript - specifically the status method (as in the following example):

<!-- the following goes in the body of the document, perhaps in a link. -->

<!-- sample link -->
<a href="javascript://place link url here"
onMouseOver="window.status='Status Bar Text Goes Here'; return true">Link Text Here</a>

<!-- place the following script in the head of the document -->
<script language="JavaScript" type="text/javascript"><!--
window.defaultStatus="Default Status Bar Text Here";
--></script>

Of course the above only works in those browsers that support javascripting,
but it is one way to hide the actual text of links from the user.
Hopefully this helps you!

Gary Clayson


Alex H wrote:
Hi Stefan,

I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex


I don't have double checked .. but .. why we need to pass the sensible information in the Query String ??
Are you sure that putting it in an hidden field (and eventualli using a GET methon in the <form>-tag) can't be a solution?
  1163   Mon May 30 20:16:11 2005 Reply Stefan Rittstefan.ritt@psi.chRequestWindows2.5.8-6Re: password encryption

Emiliano Gabrielli wrote:

I don't have double checked .. but .. why we need to pass the sensible information in the Query String ??
Are you sure that putting it in an hidden field (and eventualli using a GET methon in the <form>-tag) can't be a solution?


Hidden means only these fields are not shown in the form, but they are added to the URL in the same way as non-hidden fields. But I got another idea: I will try to use a POST form instead of the GET form. Using the POST method, fields are attached to the request and not present in the URL. Hope this will work. When I find some time to work on it I will let you know.
  1164   Tue May 31 09:07:37 2005 Agree Alex Halex@synergie-inf.comRequestWindows2.5.8-6Re: password encryption
Thanks Stefan 8)
  1176   Sat Jun 4 14:00:17 2005 Reply Stefan Rittstefan.ritt@psi.chRequest 2.5.8-6Re: password encryption

Alex H wrote:
I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex


I switched the login page to the HTTP "POST" method, where arguments are not passed in the URL.

The new version is under CVS. Can you try if the behaviour is better now? I upgraded also the ELOG forum, so you can try there as well.
  1229   Wed Jul 6 16:02:30 2005 Idea Tim Iskandertim.iskander@criticallink.comRequestAll2.5.8Request: can the comment for a log book be put in the status bar on hover
We have several logbooks running here with somewhat cryptic names. The comment field for the
logbook describes its intent well enough, so the thought was that the comment could show up in the
status bar (or tooltip) when you hover over the logbook name in the tabs at the top of the page.

___ yea Smile

___ nea Frown

/Tim
  1231   Thu Jul 7 04:44:12 2005 Question Gary Claysonimppster@gmail.comRequestWindows2.6.0-betaNew Message Formatting and Default Settings
Hello All. Please Help! How can I turn off the formatting controls above the message text when making a new or reply entry? I included the flat 'Default Encoding = 1' in my config file, but it seems to have no effect. The log has been set up to suppress all email notification, as SMTP is not being used at my location (MS Exchange Server is being used). Also How can I turn off the icon selection panel to the left of a new message text box? And, finally, is it possible to turn off the Suppress Email notification checkbox AND not send emails? Forgive me for asking yet another - but the same question about turning off the Encoding buttons - Is there some method of setting I can enter into the config file to turn off the Encoding and default it to text entry only?

Forgive this entry being so long, I'm new to using ELOG; Thanks Stefan for an incredible application. Well thought out and elegant. Keep up the good work.

Gary ;->

PS Reworking the source code, then recompiling it, is not a viable option for me at this time.
  1232   Thu Jul 7 04:47:09 2005 Idea Gary Claysonimppster@gmail.comRequestAll2.5.8Re: Request: can the comment for a log book be put in the status bar on hover

Tim Iskander wrote:
We have several logbooks running here with somewhat cryptic names. The comment field for the
logbook describes its intent well enough, so the thought was that the comment could show up in the
status bar (or tooltip) when you hover over the logbook name in the tabs at the top of the page.

___ yea Smile

___ nea Frown

/Tim


I wonder if there is any way to use the javascript 'window.status' method to accomplish this. It would be a nice addition when there are many logbooks.
Gary ;->
ELOG V3.1.5-3fb85fa6