Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 209 of 796  Not logged in ELOG logo
ID Date Icon Authordown Author Email Category OS ELOG Version Subject
  1600   Wed Jan 18 12:15:17 2006 Reply Stefan Rittstefan.ritt@psi.chQuestion 2.6.0b5Re: Quicklink does not work for one field

mark james wrote:
I am not so bold as to log this as a bug but one of my Quicklink fields just do not work.


Sorry my late reply, but now I have fixed this problem. The update is under SVN and will be contained in the next release.
  1601   Wed Jan 18 12:33:00 2006 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux Re: Automatic Copy to

Chris Warner wrote:
Is it possible to configure elog to copy a new entry from 1 logbook to another?


No, you have to copy entries manually with the "Copy to" menu command. For that, you have to put something like

Menu commands = List, New, Edit, Copy to, Delete, Reply, Duplicate, Find, Config, Help

into your configuration file.
  1602   Wed Jan 18 12:37:19 2006 Reply Stefan Rittstefan.ritt@psi.chQuestion V2.6.0Re: localhost definition problem
Hi Jason, how is going? Long time no hear!

What you need is following line in your config file:
URL = http://localhost:8080/

This is because elog does not know its "own" address, and therefore tries to figure this out over the network. Your laptop probably has the name "syslvester", and you run it inside columbia.edu, so it "thinks" it can reach itself via http://sylvester.columbioa.edu:8080. The URL statement above overrides this "guess".

Best regards,

Stefan
  1603   Wed Jan 18 12:49:39 2006 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux Re: Email based on not attribute value

Chris Warner wrote:
For instance, I have a server logbook that several people are able to write to. There is one person that is ultimately responsible for this server. I would like to generate an email any time that someone other than the System Administrator creates a new entry.


No, but there is a trick you can use. Put following into your config file:
Attributes = Author, ...
Preset Author = $long_name
Locked Attributes = Author
Options Author = Admin{1}, other{2}
{1}Suppress default = 1

Replace "Admin" with the name of the administrator. The "Author" field gets automatically set to the author name, and it's locked, so there will no be drop-down box which lets you select between "Admin" and "other". Now if the author is equal to "Admin", the condition {1} becomes true, and the "Supress default is executed. This check the "suppress email notificatio" box at the bottom, so normally no email gets sent from the administrator.
  1604   Wed Jan 18 12:57:30 2006 Reply Stefan Rittstefan.ritt@psi.chBug report  Re: In version 2.6 the themes do not work right on Windows.

Quote:
The URL is fixed at whichever logbook that is selected (e.g. ELOG 2.5.9-4 is <link rel="stylesheet" type="text/css" href="default.css"> & ELOG 2.6.0-1 is <link rel="stylesheet" type="text/css" href="http://localhost:8080/demo/default.css">).


So what is your problem? Can't you access http://localhost:8080/demo/default.css ?

If so, you could use an
URL = http://{your host}:8080/

option in your config file, where you replace {your host} with your real host name.
  1605   Wed Jan 18 13:06:50 2006 Reply Stefan Rittstefan.ritt@psi.chBug report 2.6.0Re: Attribute substitution in email configuration

Adam Blandford wrote:
Not sure if this functionality is intended or is a bug.


It was not implemented, however you call this Wink

I added that in the current SVN version, so it will be contained in the next release.
  1606   Wed Jan 18 13:31:32 2006 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.6.0Re: Problems with ELOG and Internet Explorer
Have you tried another browser, like Firefox? Do you have the same problems with Firefox? Can you try the following:

Start elogd manually with the "-v" flag, like
elogd -c <your config path> -v -p 8080
and watch the output carefully. When you submit an entry, elogd does redirection. You will see that in the HTTP header you have an entry like
...
Location: https://...
...
This location is taken from the URL statement of your config file. If it's wrong (like if you mixed http:// and https://), your browser will try to load the page from a non-existion location.
  1608   Thu Jan 19 10:31:05 2006 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2.6Re: Buffer Overflow?

Chris Warner wrote:
Users can access root level directories by using a modified URL. I saw on some security web sites that this was a problem in previous versions. Was it not fixed in 2.6?

To recreate enter http://yourhost.yourdomain.com/../../../../etc/passwd

view your password file in the browser.

If this was previously reported, is there a fix?

Chris Warner


Thanks for telling me, I didn't know. I was able to reproduce your problem under certain conditions, and I just released version 2.6.1 to fix it. However it has nothing to do with an old buffer overflow (see elog:941).

I would strongly advise everybody to upgrade as soon as possible.
ELOG V3.1.5-fe60aaf