Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 680 of 807  Not logged in ELOG logo
ID Date Icon Author Author Email Category OS ELOG Versiondown Subject
  517   Wed Mar 31 04:22:57 2004 Idea Robin Petersonrobin.h.peterson@state.or.usInfoWindows2.5.2Using Javascript files
I develop multiple client server apps and web apps deployed on intranets. I
need my users to send me bugs with screenshots attached.

So I'm interested in auto opening a new elog page in an embedded browser and
automatically doing an attachment. I've seen a couple messages about
recently added Javascript hooks (message 465). The message specified a URL
that would fire off javascript(http://localhost/demo/?cmd=New&js=test.js).
Now apparently that wasn't fully working or at least you couldn't bring up
multiple alerts. Has that been fixed, or is it just a problem with alerts?
Can I write a url that has my attributes, plus a short js script that just
adds an attachment?

Anyhow, any info on where this functionality is would be appreciated. I'm
going back to my mgmt for signoff on using this, and if I get it (fairly
high probability), then I'll have a coder start implementing it. :-)

BTW, great tool! Very clean design.

Cheers,
Robin
  519   Thu Apr 1 19:38:56 2004 Entry damon nettlesnettles@phgrav.phys.lsu.edu Linux2.5.2safari browser issue
we've experienced a problem when using the safari browser to do a search in
our elog. whenever you do a search, the logbook returns an error and the
elog deamon crashes. when we first experienced this problem we were running
version 2.3.9. however, an upgrade to version 2.5.2 doesn't seem to fix the
problem. searches with other browsers (mozilla, internet explorer, ...) go
off without a hitch.
has anyone else observed a similar problem or have any ideas on how to
resolve this issue.
thanks for the help.

elog running on a redhat 9 box
safari running on panther
  522   Mon Apr 5 09:28:19 2004 Reply Stefan Rittstefan.ritt@psi.chInfoWindows2.5.2Re: Using Javascript files
> I develop multiple client server apps and web apps deployed on intranets. I
> need my users to send me bugs with screenshots attached.

Nice idea. I was looking myself for a way to automatically attach screenshots,
but I haven't found a clever way yet. One problem with attachments I found is
that it is not possible to preset the attachment text box with a file name
because this would open up a big security hole. So a malicious web page would
preset the attachment box with a file name pointing to some local password file,
then hide the box somwhere by using a tiny font etc. So if someone presses
"submit", the secret file would automatically transferred to the remote site.
Now I don't know if this can be bypassed with JavaScript.
 
> Now apparently that wasn't fully working or at least you couldn't bring up
> multiple alerts. Has that been fixed, or is it just a problem with alerts?

The JavaScript you supply simply gets copied to the web page and executed. There
are no limitations of any kind from the elog system there. So if you have
problems, it's most likely a JavaScript problem. I found it very useful to use
the Venkman debugger (http://www.mozilla.org/projects/venkman/) which can run
inside Mozilla based browsers.

> Can I write a url that has my attributes, plus a short js script that just
> adds an attachment?

It should be in principle possible, limited maybe only with the security note I
wrote above. If you get anything working, I would appreciate if you could add
this to the "contributions" section, so that other people can benefit from this.
  523   Thu Apr 8 15:05:43 2004 Question Bertram Metzbmetz@sbs.comQuestionWindows2.5.2Global password file together with guest account
Hello,

is it possible to have an guest account together with a global password file?

I tried to put the password file statement into the global section of
elogd.cfg. But in this case every user must login and it is not possible to
have a read only guest account. 
But if I put the password file statemnet into the logbook sections, it is
possible to access the logbooks in read-only mode without logging in. The
drawback of this solution is, that you have to login into every logbook
seperately.

Bertram
Attachment 1: elogd.cfg
[global]
Port = 8080
Logfile = elogd.log
Logging level = 3
Self register = 1

Logout to main = 1
Logbook tabs = 1

Password file = ./passwd
Admin user = BMetz
Guest menu commands = Back, Find, Login, Help
Guest find menu commands = Find, Select, Login, Help

[CP9]
;Password file = ./passwd
Theme = default

[CR9]
;Password file = ./passwd
Theme = default
  524   Thu Apr 8 15:24:02 2004 Question Stefan Rittstefan.ritt@psi.chQuestionWindows2.5.2Re: Global password file together with guest account
> Hello,
> 
> is it possible to have an guest account together with a global password file?
> 
> I tried to put the password file statement into the global section of
> elogd.cfg. But in this case every user must login and it is not possible to
> have a read only guest account. 
> But if I put the password file statemnet into the logbook sections, it is
> possible to access the logbooks in read-only mode without logging in. The
> drawback of this solution is, that you have to login into every logbook
> seperately.
> 
> Bertram

Right, guest access is not possible with a global password file. This comes from
the fact that people wish to protect their logbook selection page. What I can do
is add another flag "protect selection page = 0 | 1". If "0", the logbook
selection page can be seen without logging in. Is that what yo want?

- Stefan
  525   Thu Apr 8 15:42:52 2004 Question Bertram Metzbmetz@sbs.comQuestionWindows2.5.2Re: Global password file together with guest account
> > Hello,
> > 
> > is it possible to have an guest account together with a global password file?
> > 
> > I tried to put the password file statement into the global section of
> > elogd.cfg. But in this case every user must login and it is not possible to
> > have a read only guest account. 
> > But if I put the password file statemnet into the logbook sections, it is
> > possible to access the logbooks in read-only mode without logging in. The
> > drawback of this solution is, that you have to login into every logbook
> > seperately.
> > 
> > Bertram
> 
> Right, guest access is not possible with a global password file. This comes from
> the fact that people wish to protect their logbook selection page. What I can do
> is add another flag "protect selection page = 0 | 1". If "0", the logbook
> selection page can be seen without logging in. Is that what yo want?
> 
> - Stefan
Yes, that is what I want.
Bertram
  526   Thu Apr 8 16:23:00 2004 Reply Stefan Rittstefan.ritt@psi.chQuestionWindows2.5.2Re: Global password file together with guest account
> Yes, that is what I want.

I implemented a switch "protect selection page" in revision 1.318, which can be
obtained at http://midas.psi.ch/cgi-bin/cvsweb/elog/src/elogd.c?rev=1.318. If this
switch is not set to "1", the selection page can be seen without having to log in.
  527   Tue Apr 13 11:13:53 2004 Agree Bertram Metzbmetz@sbs.comQuestionWindows2.5.2Re: Global password file together with guest account
> > Yes, that is what I want.
> 
> I implemented a switch "protect selection page" in revision 1.318, which can be
> obtained at http://midas.psi.ch/cgi-bin/cvsweb/elog/src/elogd.c?rev=1.318. If this
> switch is not set to "1", the selection page can be seen without having to log in.

Stefan,
thank you for the fast implementation of this feature. I compiled the new revision and
it worked as expected.

Kind regards,
Bertram
ELOG V3.1.5-3fb85fa6