Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 400 of 808  Not logged in ELOG logo
icon4.gif   Numbered lists get closed by </ul>, posted by T. Ribbrock on Mon Jan 30 16:26:08 2006 
I just ran into the following problem (and was able to reproduce it in the "demo" logbook on this site):

[LIST]
icon5.gif   elog allows me to create user "blahblah ", posted by Dimitrios Tsirigkas on Fri Feb 3 18:15:47 2006 
Hi,

I noticed that when I register a username that contains whitespaces (eg "boing "), elog allows me to create the user of that name and updates the password
    icon2.gif   Re: elog allows me to create user "blahblah ", posted by Dimitrios Tsirigkas on Fri Feb 3 18:25:32 2006 
By the way, it is also possible to create a user that doesn't have a password! Shouldn't that be forbidden?

Dimitris
    icon2.gif   Re: elog allows me to create user "blahblah ", posted by Stefan Ritt on Mon Feb 6 12:54:25 2006 
[quote="Dimitrios Tsirigkas"]By the way, it is also possible to create a user that doesn't have a password! Shouldn't that be forbidden?[/quote]

Well, some people want that!
    icon2.gif   Re: elog allows me to create user "blahblah ", posted by Stefan Ritt on Mon Feb 6 12:58:26 2006 
[quote="Dimitrios Tsirigkas"]I noticed that when I register a username that contains whitespaces (eg "boing "), elog allows me to create the user of that
name and updates the password file accordingly. It doesn't log me in, but it gives me no error message either. I also found that if I repeat the process
it adds yet another entry in the password file, by the same name "boing ". Is that a bug or is there something wrong with my configuration?[/quote]
    icon2.gif   Re: elog allows me to create user "blahblah ", posted by Dimitrios Tsirigkas on Mon Feb 6 16:27:45 2006 
[quote="Stefan Ritt"][quote="Dimitrios Tsirigkas"]By the way, it is also possible to create a user that doesn't have a password! Shouldn't that be forbidden?[/quote]

Well, some people want that![/quote]
    icon2.gif   Re: elog allows me to create user "blahblah ", posted by Stefan Ritt on Mon Feb 6 16:53:41 2006 
[quote="Dimitrios Tsirigkas"]I wouldn't want some imposter to start entering stuff under the username of another user, so it would be nice if I could have
some way of forcing them to have a password, even if it's a one-letter password.[/quote]
    icon2.gif   Re: Numbered lists get closed by </ul>, posted by Stefan Ritt on Tue Feb 7 12:58:10 2006 
[quote="T. Ribbrock"]I just ran into the following problem (and was able to reproduce it in the "demo" logbook on this site):

[LIST]
ELOG V3.1.5-3fb85fa6