Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 762 of 808  Not logged in ELOG logo
New entries since:Thu Jan 1 01:00:00 1970
    icon2.gif   Re: update elog downloads page, posted by Stefan Ritt on Mon Sep 18 14:38:30 2023 
Thanks for the reminder, I updated the download instructions.
    icon2.gif   Re: elog server crashed due to cookies send by client, posted by Heinz Junkes on Tue Sep 19 10:58:14 2023 
The server is crached because the author field was accidentally filled with a long string due to an automated (remote) script:


Author: The ion getter pump has successfully recovered and appears to be operating steadily once more. Consequently, I proceeded with sputtering
icon5.gif   user change under webserver authentication not recognized, posted by Frank Heyroth on Fri Jan 19 15:49:13 2024 
Hi all,

I am using the Apache webserver authentication and redirection over http (not https). I have configured it 1:1 as described in the Adminguide.
In the elog.cfg I set Authentication = Webserver.
    icon2.gif   Re: user change under webserver authentication not recognized, posted by Frank Heyroth on Wed Jan 24 14:50:21 2024 
I found the reason of the bug:
In line 27441 of elogd.cxx the http_user is overwritten by the user saved in the sid_ array as a sideeffect of the sid_check
function:
    icon2.gif   Re: http status 200 returned for "file not found", posted by Alexey Khudyakov on Tue Jan 30 13:10:38 2024 
> "file not found" should return http code 404. elogd returns code 200 together
> with a page containing text "404 not found". This pollutes the browser cache
> with wrong content (in this case, we are trying to load a css file, and the browser
    icon2.gif   Re: http status 200 returned for "file not found", posted by Stefan Ritt on Fri Feb 23 14:59:29 2024 
> > "file not found" should return http code 404. elogd returns code 200 together
> > with a page containing text "404 not found". This pollutes the browser cache
> > with wrong content (in this case, we are trying to load a css file, and the browser
    icon2.gif   Re: user change under webserver authentication not recognized, posted by Stefan Ritt on Fri Feb 23 15:13:46 2024 
Thanks for the fix, I committed it. Please give it a quicky try sinc I cannot test it here (don't use webserver authentication...)

Stefan




Frank
icon5.gif   Runaway bogus attachment counts in Summary view attachment column, posted by Andreas Warburton on Thu Mar 7 08:55:49 2024 
On a new MacBook Pro (Silicon M3), I installed version 3.1.5 build 23df00d9.  The application appears to work normally, except that, after a short
while, the indicated attachment count (paperclips in the attachment column of the Summary view) starts to increment fairly rapidly with each time
that I visit the page.  Attachment counts appear even for records that don't have any attachments.  When I access records individually, either
ELOG V3.1.5-3fb85fa6