Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 312 of 807  Not logged in ELOG logo
New entries since:Thu Jan 1 01:00:00 1970
ID Date Icon Author Author Emaildown Category OS ELOG Version Subject
  68671   Tue Aug 22 14:26:42 2017 Reply Stefan Rittstefan.ritt@psi.chQuestionWindows3.1.2Re: HTML in attribute values
  • As you can see...
  • <UL> is possible
Richard Stamper wrote:

When one has "Allow HTML = 1" to permit HTML in attribute values, is it only a subset of HTML that is rendered?

I find that <br> and <a href="..."> tags are properly rendered, for example, but lists with <ol> and <ul> are not.

 

  68673   Tue Aug 22 14:37:44 2017 Reply Stefan Rittstefan.ritt@psi.chQuestionWindows3.1.2Re: HTML in attribute values

Sorry, I misread your question. Only following HTML tags are allowed in attributes:

<a>
<img>
<b>
<i>
<p>
<br>
<hr>

This is for some internal reason. Probably you can mimick <ul> with bullets and <p> tags.

Stefan

 

Richard Stamper wrote:

Isn't that list in the message text rather than as an attribute value?

Stefan Ritt wrote:
  • As you can see...
  • <UL> is possible
Richard Stamper wrote:

When one has "Allow HTML = 1" to permit HTML in attribute values, is it only a subset of HTML that is rendered?

I find that <br> and <a href="..."> tags are properly rendered, for example, but lists with <ol> and <ul> are not.

 

 

 

  68681   Thu Aug 24 11:46:30 2017 Reply Stefan Rittstefan.ritt@psi.chQuestionMac OSXv3.1.2Re: Hide logbook tab when not authorized

Hi Stefano,

that's what top groups were made for. So make a top group for yourself, and nobody will be able to see them without having the proper URL. Hiding logbooks from the logbook selection page is not possible since when people bring up that page, they are not yet logged in, so elog does not know who is accessing the page (fortunatley no face recognition yet!). So if elog doe not know who looks at that page, logobook which a certain use has no access to cannot be hidden becuase the user is not known at that point.

Best regards,

Stefan

Andreas Luedeke wrote:

Well, Stefan would need to answer that. But if you are good with C-programming, you might implement it yourself?

There is a way to implement it; but it makes your installation a lot more complicated: you can have two ELOG servers. The first has all logbooks but requires authentification to read any. The second has only the public logbooks, and they are mirrored from the first.

Stefano Bonaldo wrote:

Hi Andreas,

many thanks for your answer. I partially agree with you, because sometimes "for privacy" of my working group I don't want that other users (external users) know the existance of the other logbooks.

Do you think that will be implemented in future?

Best regards, Stefano

Andreas Luedeke wrote:

Hi Stefano,

I think your assessment is correct: it is not possible to hide a logbook based on your read/write privileges.
And I'm not even sure that this would make much sense: at least you need to be able to get to the login page of the logbook.
But if you don't have read privileges for a logbook, you'll be automatically redirected to the login page, as soon as you select this logbook.

Kind Regards, Andreas

Stefano Bonaldo wrote:

Hello, I read carefully the manual, but I didn't find a way to hide the logbooks in the logbook bar and in the initial logbook selection for which the user does not have the access. So, if a user1 does not have the access to a specific logbook, user1 is not able to see that logbook in the bar and neither in the initial logbook selection. How can I do this without using the top groups?

 

 

 

 

  68690   Mon Oct 2 14:58:32 2017 Reply Stefan Rittstefan.ritt@psi.chQuestionWindowsELOG V3.1.3-fd7Re: Format Form

The way and entry form can be customized is kind of limited in elog. You can use "format <attribute> = ..." to request a certain width, number of allowed characters and special CSS class (which of course you have to define). If you want a complete custom entry form, have a look here: elog:66909 . This requires however writing your own HTML, CSS and JavaScript.

Stefan

Tim Schelfhout wrote:

Hello there,

I am trying to format my entry form a little bit more practical and readable. I am struggling with the following:

  • Numbers should be standard fields of 3 characters and can only be 3 characters wide (doing this by Format Leeftijd=1, css, 3, 3)
  • Text Entry fields should be max. width of 15 characters ? 

Also struggling with mutliple fields on one line:

  • Can Spacing between fields be controlled?  Even vertical spacing?
  • When omitting the css in the Format syntax, the fieldname and field gets colored dark blue
    .. found via css inspection a part solution using this (Format Leeftijd=1, attribname, 3, 3), but then the value still gets colored dark blue

Also I see that when one formats the entry field in edit mode it shows differently in list mode. (for example set width is not enforced in list mode)

Anyone ?

 

 

  68692   Mon Oct 2 15:53:39 2017 Reply Stefan Rittstefan.ritt@psi.chQuestionWindowsELOG V3.1.3-fd7Re: Format Form

The link does now work in the email, but if you go to the web interface of the forum it does work.

Anyhow, you can go directly to https://midas.psi.ch/elogs/Forum/66909

Stefan

Tim Schelfhout wrote:

Thankx 4 the quick reply Stefan.  The link you provided does  not work .... could you point me again in the 
right direction?  Where can I find more info on this ability?

Thankx

Stefan Ritt wrote:

The way and entry form can be customized is kind of limited in elog. You can use "format <attribute> = ..." to request a certain width, number of allowed characters and special CSS class (which of course you have to define). If you want a complete custom entry form, have a look here: elog:66909 . This requires however writing your own HTML, CSS and JavaScript.

Stefan

Tim Schelfhout wrote:

Hello there,

I am trying to format my entry form a little bit more practical and readable. I am struggling with the following:

  • Numbers should be standard fields of 3 characters and can only be 3 characters wide (doing this by Format Leeftijd=1, css, 3, 3)
  • Text Entry fields should be max. width of 15 characters ? 

Also struggling with mutliple fields on one line:

  • Can Spacing between fields be controlled?  Even vertical spacing?
  • When omitting the css in the Format syntax, the fieldname and field gets colored dark blue
    .. found via css inspection a part solution using this (Format Leeftijd=1, attribname, 3, 3), but then the value still gets colored dark blue

Also I see that when one formats the entry field in edit mode it shows differently in list mode. (for example set width is not enforced in list mode)

Anyone ?

 

 

 

 

  68709   Wed Dec 6 13:34:56 2017 Reply Stefan Rittstefan.ritt@psi.chQuestionLinuxELOG V3.1.2Re: possible DOS vulnerability with negative Content-Length field

I have fixed this issue in the current develop branch of elog.

Stefan

Christian Herzog wrote:

Hi,

 

a routine scan revealed a possible DOS attack vector: sending an invalid POST HTTP request with a negative Content-Length field crashes our elog instance, leading to service unavailability.

 

thanks,

-Christian

 

 

-- 
Dr. Christian Herzog <herzog@phys.ethz.ch>  support: +41 44 633 26 68
IT Services Group, HPT H 8                    voice: +41 44 633 39 50
Department of Physics, ETH Zurich           
8093 Zurich, Switzerland                     http://nic.phys.ethz.ch/

 

 

  68712   Mon Dec 11 13:16:32 2017 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux3.1.2-bd7Re: hosts allow

Have you set

Resolve host names = 1

in the config file? If it still does not work, run "elogd -v" from the terminal and watch the output. You should see someting like:

Remote host "mpc1865.psi.ch" matches "ALL" in "Hosts deny". Access denied.
Remote host "mpc1865.psi.ch" matches ".lbl.gov" in "Hosts allow". Access granted.

 

Regards,
Stefan

Andreas Luedeke wrote:
Hi Susan,
the documentation states that you should start elogd with the -v option from the command line and look at the output. Did you try this?
You might post the output here to get further help.
Cheers
Andreas
Susan James wrote:

Hi All,

We're still having trouble with hosts.allow and hosts.deny.

We're trying to allow all of our domain  lbl.gov to the access list

for our logbooks.  But the combination below is not working.

==========================

[ below denies ALL ]

Hosts allow = .lbl.gov
Hosts deny = ALL

[ below denies ALL ]

Hosts deny = ALL

Hosts allow = .lbl.gov

========================
Can someone help?

Susan James wrote:

thanks for your quick reply.

the configuration is still not working.  See my entry below which denies everyone.

I've tried many different combinations of 'hosts allow and hosts deny'

we want to restrict all our logbooks to only domain lbl.gov

[ below denies ALL ]

Hosts allow = .lbl.gov
Hosts deny = ALL

[ below denies ALL ]

Hosts deny = ALL

Hosts allow = .lbl.gov
 

Can you help?

 

Andreas Luedeke wrote:

Hi Susan,

according to the documentation you need to add "Hosts deny = All" in addition to the "Hosts allow" command.
Here is the relevant excerpt from the documentation (https://midas.psi.ch/elog/config.html#access).
Cheers
Andreas
  • Hosts allow = <list>
  • Hosts deny = <list>

These two settings can be used to restrict the access to the logbook to certain computers. It is similar to the UNIX hosts.allow and hosts.deny files. The list can consist of individual host names or IP numbers, subnet masks like 123.213. (note the trailing '.') or .mit.edu, or the word All. The following rules are applied:

  • Access will be granted when a host matches a pattern in "hosts allow".
  • Otherwise, access will be denied when a host matches a pattern in "hosts deny".
  • Otherwise, access will be granted.

These rules are applied before any password is checked. To debug problems, start elogd with the "-v" flag, in which case the rule checking is printed on the screen.

 

Susan James wrote:

I'm trying to wrap our elog instance to our company domain which is lbl.gov

I add this entry below (without quotes) to elogd.cfg and it's not working.  the world can see our logbooks

" Hosts Allow = *.lbl.gov ".

can someone help?

 

 

 

 

 

 

 

  68713   Mon Dec 11 13:20:49 2017 Reply Stefan Rittstefan.ritt@psi.chQuestionWindows2.92.2Re: Tool Tips
Tooltips on 'ROptions' work since 2007, but your version 2.9.2 is pre-2007, so you should consider to upgrade.

Stefan


Grant Jeffcote wrote:
Stefan, I know this request was a long time ago on an older version of E-Log (which we are still using) but can you tell me if Tooltips on Radio Buttons was ever implemented, it's not working on our version (2.92.2)?
Working as it should on MOptions?


Stefan Ritt wrote:

Grant Jeffcote wrote:
I can't seem to get the Tooltips to show up using the 'ROptions' (radio buttons) though? Could you check if it is available for this please?


Did I tell that it also works with 'ROptions' ??? It does not! I implemented this just now in revision 1788. The fix will be contained in the next release.
ELOG V3.1.5-3fb85fa6