Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 790 of 796  Not logged in ELOG logo
ID Date Icon Author Author Email Category OS ELOG Versionup Subject
  1278   Mon Jul 18 18:36:32 2005 Warning Emiliano GabrielliAlberT@SuperAlberT.itBug reportLinuxrev 1.703Re: Display Subject and HTML tags, regression

Emiliano Gabrielli wrote:
rev 1.703 makes the following code not to work:
Display Subject               = <b>$subject</b>

the <b> tag is displayed and not interpreted, as it was in previous revisions..


this patch should fix the problem .. a little bug still remain, if you insert some allowed HTML tags in the subject this is detected by is_html() so the Display Attribute and the Link is not applied .. the result is that the HTML is working but no elog featur is applied
  1286   Wed Jul 20 22:28:14 2005 Reply Stefan Rittstefan.ritt@psi.chBug reportLinuxrev 1.703Re: Display Subject and HTML tags, regression

Emiliano Gabrielli wrote:
rev 1.703 makes the following code not to work:
Display Subject               = <b>$subject</b>

the <b> tag is displayed and not interpreted, as it was in previous revisions..


rev. 1.707 makes it work again Big grin
  1287   Wed Jul 20 22:39:05 2005 Reply Stefan Rittstefan.ritt@psi.chBug reportLinuxrev 1.703Re: Display Subject and HTML tags, regression

Emiliano Gabrielli wrote:

Emiliano Gabrielli wrote:
rev 1.703 makes the following code not to work:
Display Subject               = <b>$subject</b>

the <b> tag is displayed and not interpreted, as it was in previous revisions..


this patch should fix the problem .. a little bug still remain, if you insert some allowed HTML tags in the subject this is detected by is_html() so the Display Attribute and the Link is not applied .. the result is that the HTML is working but no elog featur is applied


Your line
if (p && strchr(str, '>') && p >= str && *(p-1) != '\\')

in the code does not work. If the pattern is at the beginning of the string (p == str), then (p-1) points to an invalid location and can cause a segmentation fault. The correct patch is in CVS.
  1293   Thu Jul 21 11:00:47 2005 Reply Emiliano GabrielliAlberT@SuperAlberT.itBug reportLinuxrev 1.703Re: Display Subject and HTML tags, regression

Stefan Ritt wrote:

Emiliano Gabrielli wrote:
rev 1.703 makes the following code not to work:
Display Subject               = <b>$subject</b>

the <b> tag is displayed and not interpreted, as it was in previous revisions..


rev. 1.707 makes it work again Big grin


ok, nice Smile
  1294   Thu Jul 21 11:02:44 2005 Reply Emiliano GabrielliAlberT@SuperAlberT.itBug reportLinuxrev 1.703Re: Display Subject and HTML tags, regression

Stefan Ritt wrote:

Emiliano Gabrielli wrote:

Emiliano Gabrielli wrote:
rev 1.703 makes the following code not to work:
Display Subject               = <b>$subject</b>

the <b> tag is displayed and not interpreted, as it was in previous revisions..


this patch should fix the problem .. a little bug still remain, if you insert some allowed HTML tags in the subject this is detected by is_html() so the Display Attribute and the Link is not applied .. the result is that the HTML is working but no elog featur is applied


Your line
if (p && strchr(str, '>') && p >= str && *(p-1) != '\\')

in the code does not work. If the pattern is at the beginning of the string (p == str), then (p-1) points to an invalid location and can cause a segmentation fault. The correct patch is in CVS.


ehhe, I used "should" infact Tongue
  974   Mon Mar 7 16:05:22 2005 Entry Emiliano GabrielliAlberT@SuperAlberT.itBug reportAllrev. 1.51Display <attribute> do erroneously encoded
Display subject = <b>$subject</b>

is printed to the browser encoded, so that it is diplayed as is..
  982   Mon Mar 14 21:11:11 2005 Reply Stefan Rittstefan.ritt@psi.chBug reportAllrev. 1.51Re: Display <attribute> do erroneously encoded
> 
> Display subject = <b>$subject</b>
> 
> is printed to the browser encoded, so that it is diplayed as is..

I fixed that in revision 1.587. Note however that you should do the formatting
of attributes better using the CSS functionality, since it gives you more
possibilities. See for example the subject of this forum, which has it's own
CSS class "subjname", which has a larger font size. You select your own class like

Format Subject = 0, subjname, subjvalue

in the configuration file. Then add the classes into the CSS file.

Now elog shows each attribute which contains a "<b>" encoded (as HTML). But if you
want to write a subject line like "For bold use <b> in HTML", then the "<b>"
triggers the HTML display, so it is not written as is, which is not what you want in
that case. Since there is no switch "Submit as HTML text" for the attributes, it is
hard for elog to "guess" if you want HTML encoded or not.
  66660   Wed Jan 6 22:17:49 2010 Question Aaron Coutureacouture@lanl.govBug reportLinuxrev2280Problem with CRYPT+SSL and elog command line entries

I am in the process of setting up a new ELOG logbook.  I checked out rev2280 from svn.savannah.psi.ch.  I knew I wanted to encrypt passwords, so when I compiled, I used flags

 

USE_SSL=1

and

USE_CRYPT=1

 

I am running Red Hat enterprise linux 3, glibc-devel-2.3.2-95.50, openssl-devel-0.9.7a-33.25

Everything seemed to be working fine--I was able to set up logbooks using both a password file as well as write passwords and make entries to the logs.  Then I tried to use the command line 'elog' to make an entry which failed to both logbooks.

 

/opt/elog/pro/elogd -c /opt/elog/pro/dansce_fancy.cfg -l Demo1 -w <mypassword>

Would change the password in dansce_fancy.cfg and I could make entries through the web interface, but

 

elog -h acouture -s -p 8081 -w <mypassword> -l Demo1 -a Author="Aaron Couture" -a Type=Routine  -m Sampleinfo.txt -x -n 1

failed with

Error: Invalid user name or password

I got the same behaviour when I used a logbook with a user/password pair defined in a password file.

 

When I looked at the output from running elogd with the -v flag, I could see that everything was being received on the server side, but that the password did not agree with the write password in dansce_fancy.cfg

I then recompiled elog with

USE_SSL=1

USE_CRYPT=

And then the elog command line entries worked, both with write passwords and a password file (after recreating the password file and the write password).  Looking at the elog.c source code, it appears that it does not know to use crypt rather then base64_encode when USE_CRYPT is true.  elogd.c defined different behaviour if USE_CRYPT is defined.

 

Thanks,

 

Aaron Couture

 

 

ELOG V3.1.5-2eba886