Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 288 of 808  Not logged in ELOG logo
ID Date Icon Author Author Emaildown Category OS ELOG Version Subject
  67845   Tue Mar 31 11:44:27 2015 Reply Stefan Rittstefan.ritt@psi.chQuestionWindowsELOG V2.9.Re: Strange browser behaviour with chrome?

Andreas Luedeke wrote:
the content of a particular entry can change the rendering. If you have an HTML end tag like </table> or </font> in your entry, then the display after that entry may be spoiled.


Actually not. If you have HTML statements in entries, they will be rendered using escape characters (like </table> -> &lt;/table&gt;). This is necessary to avoid cross-side-script vulnerabilities (XSS). If this is not working in some case, let me know and I have to fix it. The only exception is if you explicitly allow this via Allow HTML = 1
  67848   Wed Apr 1 11:41:31 2015 Reply Stefan Rittstefan.ritt@psi.chQuestionWindowsELOG V2.9.Re: Strange browser behaviour with chrome?

Andreas Luedeke wrote:
If the content has been added with the "elog" command as HTML then it can contain mismatching HTML tags, can't it?
I don't see how this could be avoided by ELOG, unless you want to do a full HTML syntax check of all new and modified entries.


It works also with entries submitted by the "elog" command. The reason is that for the OUTPUT, all "<" characters are transformed into &gt;, which "inactivates" any HTML code, no matter where it came from.
  67854   Wed Apr 1 20:25:21 2015 Reply Stefan Rittstefan.ritt@psi.chQuestionWindowsELOG V2.9.Re: Strange browser behaviour with chrome? </table>

Andreas Luedeke wrote:
Now I'm confused: if I create an entry with "elog -n 2 ...", then I put HTML code into elog and it is displayed as HTML. This HTML code does NOT convert a "<" into "&lt;", otherwise you could not display any HTML.
But of course this code can be wrongly formatted, for example it can contain a </table> tag without a <table> tag before it. This will definitely spoil the display in ELOG, and that was what I was refering to.
I agree that html tags in plain text entries will not have this problem.


Sure, in the main body text you can insert arbitrary HTML if this type of encoding is not prohibited. The &lt; encoding I meant was for attribute values. Proof of principe above in the Subject field.
  67855   Thu Apr 2 15:44:33 2015 Idea Stefan Rittstefan.ritt@psi.chInfoAll3.1.0ELOG Version 3.1.0 announcement

This is an announcement for the ELOG version 3.1.0 being released just now. Among several bug fixes and an improved Drag & Drop interface for attachments, it contains a long awaited "autosave" feature.

Let's assume that you write an ELOG entry, and keep the window open for a longer time (like to write some shift notes over several hours). If your browser crashes or closes for some reason, you will loose your entered text. To avoid that, ELOG starting from version 3.1.0 has an autosave feature. Whenever you enter some text, it is saved in the background as a draft message to the server. If your browser is closed by accident, you always can go back to the logbook, click "New" and ELOG will tell you that there is a draft message and asks you if you want to edit it. When you edit and regularly submit this message, it becomes a "normal" entry and the draft flas is removed. In addition to the background saving, there is now also a "Save" button so you can manually save your text to the draft entry.

I have tested this to some extent, but I might not have seen all browser/OS combinations, so in case there is a problem, please report it here.

Happy Easter,
Stefan

  67861   Wed Apr 15 09:01:04 2015 Reply Stefan Rittstefan.ritt@psi.chInfoAll3.1.0Re: ELOG Version 3.1.0 announcement

The changelog is here: http://midas.psi.ch/elog/download/ChangeLog

It is save to install the new version over the old one.

 

Banata Wachid Ridwan wrote:

congrats, any detail changelog? I assume in software packages?

is it save just install and overwrite the old version?

Stefan Ritt wrote:

This is an announcement for the ELOG version 3.1.0 being released just now. Among several bug fixes and an improved Drag & Drop interface for attachments, it contains a long awaited "autosave" feature.

Let's assume that you write an ELOG entry, and keep the window open for a longer time (like to write some shift notes over several hours). If your browser crashes or closes for some reason, you will loose your entered text. To avoid that, ELOG starting from version 3.1.0 has an autosave feature. Whenever you enter some text, it is saved in the background as a draft message to the server. If your browser is closed by accident, you always can go back to the logbook, click "New" and ELOG will tell you that there is a draft message and asks you if you want to edit it. When you edit and regularly submit this message, it becomes a "normal" entry and the draft flas is removed. In addition to the background saving, there is now also a "Save" button so you can manually save your text to the draft entry.

I have tested this to some extent, but I might not have seen all browser/OS combinations, so in case there is a problem, please report it here.

Happy Easter,
Stefan

 

 

  67862   Wed Apr 22 13:40:19 2015 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux3.1Re: Max Logbooks for Email notify

Ok, I fixed this in the current GIT version. You might check if that works for you.

Oliver Kleinau wrote:

It was str variable in function process_http_request in elogd.c.

This should have the size of received buffer.

PROBLEM SOLVED!!!

Oliver Kleinau wrote:

It seems to be the GET buffer of the elog-Server. The GET statement is cut off after &sub_lb72=1&sub_ eg. 1000 chars.

Oliver Kleinau wrote:

Hi,

we've got 109 logbooks in Elog. Whenever I set a notify for all logbooks in configuration menu it is limited to 73 entrys. After saving the changes the rest of the entrys are cut off.
I've already searched in the sourcecode if I can find some limitation for that but without success.

When I change the password file by hand, it is working as long as I don't change anything in the configuration that rewrites the file.

Regards,
Oliver

 

 

 

 

  67863   Thu Apr 23 15:13:06 2015 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux3.1.0 c701Re: Odd behaviour when attaching a file to an entry

This problem has been fixed in Version 3.1.0-2. Please upgrade.

David Pilgram wrote:

Having installed v3.1.0 on a test logbook, I find that I can browse and select a file, but when I click on the "Upload" button, I get a pop-up message from the browser asking me:

"This page is asking you to confirm that you want to leave - data you have entered may not be saved."

 

The stay on page does nothing, the leave page option does what one expects from elog - that is the attachment thumbnail is generated etc. 

I guess this is something to do with the drag and drop feature, but wondered if others have this issue or whether it may just be some mystery setting of the browser (firefox).

 

 

  67866   Thu Apr 30 13:01:29 2015 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux3.1.0Re: elogd lost entry database without restart during file system trouble
First, I can only fix problems which are reproducible. Can we do another power outage at PSI again?

But seriously, I guess what happened is that elog sees an empty directory when the AFS server
goes down. If this happens, it rebuilds its internal (RAM based) indes, and sees no entries there.
So the next entry will be ID 1. That should be independent of the ELOG version. I guess if PSI
would have a power outage a year ago, you could have had the same problem.

I had problem some long time a go with AFS, where the network access blocked the program
for several minutes. I decided then to ONLY use local filesystems for elog servers, and do the
backup via rsync to an AFS account. Since then I never had problems.

Now it is hard for me to develop code which avoids the mentioned problem. I could maybe
check if there are many entries, and all over sudden there are no entries any more, the server
just stops with some detailed error message. But it is hard for me to mimic the AFS server 
outage. I can try to manually delete elog files and see what happens, but this only partially
mimics network problems.

/Stefan

> I'm running ELOG since several years with rather heavy usage.
> Last week I've upgrades from 3.0.0 to 3.1.0 and this week I had twice the same problem:
> elogd lost the index for old entries and showed empty logbooks, without having restarted.
> The logbooks appeared to be empty; new entries started with index "1".
> The first time the origin of the problem were network troubles;
> the second time it had been caused by a severe problem of our AFS file system service.
> I never experienced this consequence for ELOG in the past when we had AFS problems.
> 
> Since the logbooks are used for the operation log of a user facility they continued to do new entries.
> The next day I had to re-number the new entries and restart elogd and everything was fine.
> 
> I could understand if elogd crashes when the filesystem of the logbook goes away.
> And when it restarts with an (temporarily) empty filesystem, that would explain what happened.
> But it did not restart and the log file does not contain any information about any problem, 
> just that suddenly all new entries in each logbook started with ID "1" again.
> 
> Stefan, any idea?
> Anyone else ever experienced that with the new ELOG version (or older ones)?
ELOG V3.1.5-3fb85fa6