Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 611 of 807  Not logged in ELOG logo
ID Date Icon Author Author Email Category OS ELOG Version Subjectdown
  1324   Tue Jul 26 10:49:12 2005 Entry Emiliano GabrielliAlberT@SuperAlberT.itQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Stefan Ritt wrote:

Chris Green wrote:
1) With the configuration below, I can't set the Author attribute to be the author of the reply. As written, it gives the Author field as blank. If the Remove on Reply line is removed, it is set to the parent's author. What am I doing wrong?


Hey, elog made it to MiniBooNE! I'm working on MEG...

What you need is the following:
Preset on reply subject = Re: $subject
Preset Author = $long_name
Preset on Reply Author = $long_name
Locked Attributes = Author

The Subst statements work after the entry gets submitted, while the preset statements work before. So Preset on Reply <attribute> is what you need.


Depending of what your paranoia level is Smile
Substitute is the only way I have to be assure it is as I want ... yes, in real life nobody of my users will never try to change the generated HTML ad replace by hand the Author, but ... Tongue
  1325   Tue Jul 26 10:51:12 2005 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Emiliano Gabrielli wrote:
Substitute is the only way I have to be assure it is as I want ...


No, that's not true. A
Locked attributes = Author

will do the job as well.
  1326   Tue Jul 26 10:55:03 2005 Reply Emiliano GabrielliAlberT@SuperAlberT.itQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Stefan Ritt wrote:

Emiliano Gabrielli wrote:
Substitute is the only way I have to be assure it is as I want ...


No, that's not true. A
Locked attributes = Author

will do the job as well.


I can't argue how it works ...
The following code will assure that, if the HTML generated by elog would be modified by hand by a malicious user the server can still preset the author field with the right $long_name?
Locked attributes = Author
Preset on Reply Author = $long_name

how works in details the "Locked Attribute" parameter then ?? ...
  1327   Tue Jul 26 10:59:45 2005 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Emiliano Gabrielli wrote:
The following code will assure that, if the HTML generated by elog would be modified by hand by a malicious user the server can still preset the author field with the right $long_name?


Ok, you're right. But that requires quite some knowledge to change the generated HTML by hand. So for paranoiac people the "Subst" might be better. Actually you could have both the "Preset on Reply" and the "Subst on Reply", so on the reply entry form one sees already the correct author.
  1328   Tue Jul 26 12:02:35 2005 Reply Emiliano GabrielliAlberT@SuperAlberT.itQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Stefan Ritt wrote:

Emiliano Gabrielli wrote:
The following code will assure that, if the HTML generated by elog would be modified by hand by a malicious user the server can still preset the author field with the right $long_name?


Ok, you're right. But that requires quite some knowledge to change the generated HTML by hand. So for paranoiac people the "Subst" might be better. Actually you could have both the "Preset on Reply" and the "Subst on Reply", so on the reply entry form one sees already the correct author.


It's my actual configuration infact Wink
  1332   Tue Jul 26 17:32:59 2005 Smile Chris Greengreenc@fnal.govQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?
Thanks for this, gents.

Chris.
  66486   Sat Aug 1 09:34:00 2009 Reply Stefan Rittstefan.ritt@psi.chQuestionLinuxV2.7.7-1Re: Can't install on Fedora 11

Neil B. Cohen wrote:

Tried installing on Fedora 11 - failed dependency on libssl.so.6 I have libssl.so.8 installed. What do I need to do to install this package?

thanks,

nbc

The easiest is if you install from source by downloading the tar ball. It's hard these days to make a RPM which runs on all possible distributions. I would have to maintain a zoo of new and old distributions, which I don't have the hardware for. Or you go and install libssl.so.6 by hand.  

  65801   Tue Apr 1 08:04:18 2008 Reply Stefan Rittstefan.ritt@psi.chRequestWindows Re: Can u send me the configuration file for this logbook ?

Franck C wrote:

Hi, I try to set up a logbook and i wanted to create something with icons (like this logbook) and it will be easier for me if i have ur config file

Thanks a lot

Franck

https://midas.psi.ch/elogs/Config+Examples/2

- Stefan

 

ELOG V3.1.5-3fb85fa6