Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 788 of 805  Not logged in ELOG logo
icon1.gif   Posting without logging in!, posted by Dimitrios Tsirigkas on Thu Feb 9 14:15:54 2006 
Hi all! This is an HTTP POST request submitted from the command line using curl, and providing no authentication information. If I can post as myself using this command, then shouldn't something be done about this? Cheers, Dimitris
    icon2.gif   Re: Posting without logging in!, posted by Stefan Ritt on Fri Feb 10 11:41:38 2006 

Dimitris wrote:
Hi all! This is an HTTP POST request submitted from the command line using curl, and providing no authentication information. If I can post as myself using this command, then shouldn't something be done about this?


Yes indeed. I fixed that in SVN revision 1655. I upgraded this server so you can try again if it works.
    icon2.gif   Re: Posting without logging in!, posted by Dimitrios Tsirigkas on Fri Feb 10 16:16:11 2006 

Stefan Ritt wrote:

Yes indeed. I fixed that in SVN revision 1655. I upgraded this server so you can try again if it works.


Just tried it, it's fixed Smile
Dimitris
icon5.gif   Forgot password, posted by Hagelstein, Kay on Mon Feb 27 08:43:22 2006 elogd.cfg
Hi,

the "Forgot password?" option doesn’t work with the Group option.

The elog Version is ELOG V2.6.1-1668

Regards
Kay
icon5.gif   Find in multiple logbooks returns wrong pages, posted by Patrick Decowski on Mon Feb 27 19:29:15 2006 
hello ELOG developers,

i think that i found a problem in the find function of ELOG  version 2.6.1. i can reproduce it on the forum ELOG website on midas.psi.ch:

go to: http://midas.psi.ch/elogs/Contributions/?cmd=Find
and enter under author 'ritt' and check the 'search all logbooks' checkmark, then search

the returned list has all your postings on all three ELOG sections, but if you look at the links that are returned, they point to the 'Contributions' 
portion of the ELOG and not the 'Forum' portion as they should. this means that the wrong posting is returned when you click on the link (or in 
this case, no posting at all).

for example, the HTML of the first link is
[...]
<tr>
<td class="list2" nowrap><a href="1723">Forum</a></td>
<td class="list2">
<a href="1723">&nbsp;&nbsp;1723&nbsp;&nbsp;</a>
</td>

<td class="list2" nowrap><a href="1723">Thu Feb 23 15:50:20 2006</a></td>
<td class="list2"><a href="1723">Stefan <B style="color:black;background-color:#ffff66">Ritt</B></a></td><td class="list2"><a 
href="1723"><a href="stefan.ritt@psi.ch">stefan.ritt@psi.ch</a></a></td><td class="list2"><a href="1723">Question</a></td><td 
class="list2"><a href="1723">Re: Protect Selection page</a></td><td class="list2"><a href="1723"></a>&nbsp;</td><td class="list2"><a 
href="1723"></a>&nbsp;</td><tr>
[...]

i.e., it is missing '../Forum' in front of all the links.

regards,
patrick.
Entry   , posted by on Fri Mar 24 14:06:19 130 
 
    icon2.gif   Re: Find in multiple logbooks returns wrong pages, posted by Stefan Ritt on Mon Mar 6 13:06:59 2006 
This problem has been fixed in SVN revision 1671.
    icon2.gif   Re: Access to global configuration in v2.6.1, posted by Giorgio Croci Candiani on Tue Mar 14 17:11:10 2006 
> > or maybe browser cookies. 
> 
> That rings a bell. If you change user permissions (like password file/no password file/rename logbooks) you might be
> fooled by old cookies. Just delete all cookies in your browser and try again.

Hi,
here I am at it again. Since my first posts, I tried to install the latest version of elog out-of-the-box on one pair of
PCs from scratch (fresh elog install on new, just-installed PCs, OS WinXP Pro and Win2000), but with no results. No
trace of the global configuration menu or the buttons to reach it.
Neither taking a look at the code has helped, I could not figure out exactly where the button bar was generated.
Didn't anybody other point out a similar behaviour? Do you have any suggestion for any tests to carry out?
Thanks
GiorgioCC
ELOG V3.1.5-3fb85fa6