Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 650 of 807  Not logged in ELOG logo
ID Date Icon Author Author Email Category OS ELOG Version Subject
  1329   Tue Jul 26 16:44:41 2005 Reply Juliana Pengjpeng@yorku.caRequestLinuxV2.6.0Re: hide attributes when view the logbook

Stefan Ritt wrote:

Juliana Peng wrote:
Thanks so much. But the new feature seems not working.


Are you sure you got the latest CVS version and recompiled correctly?

I tried with following config:
[global]
port = 8080

[demo]
Attributes = Name, SysAdmin, OS, Manufacturer, Model, Serial Number, Description, Main Function, Location, Memory, CPU Speed, Num CPU, Owner, Contact Name, Contact Phone, Contact Email, Bought From, Bought Date, Maintenance, Network Drop, Console Drop
Options OS = SunOs{1}, Linux{2}, Aix
{1} Show Attributes = Name, SysAdmin, OS, Manufacturer, Model, Serial Number, Description

Then I added two entries, where OS = SunOS and Aix. As soon as I select SunOS, the attributes except those listed in {1} disappear. The same is true then for the single entry display. Here is the one with the Aix:

and here with SunOS:

So can you reproduce this?


Thanks. But what I want is to hide the unwanted attributes at summary view, not just hide them when I click on entry.

Here is the example, can i hide the attributes at this page when I select SunOS:

  1328   Tue Jul 26 12:02:35 2005 Reply Emiliano GabrielliAlberT@SuperAlberT.itQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Stefan Ritt wrote:

Emiliano Gabrielli wrote:
The following code will assure that, if the HTML generated by elog would be modified by hand by a malicious user the server can still preset the author field with the right $long_name?


Ok, you're right. But that requires quite some knowledge to change the generated HTML by hand. So for paranoiac people the "Subst" might be better. Actually you could have both the "Preset on Reply" and the "Subst on Reply", so on the reply entry form one sees already the correct author.


It's my actual configuration infact Wink
  1327   Tue Jul 26 10:59:45 2005 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Emiliano Gabrielli wrote:
The following code will assure that, if the HTML generated by elog would be modified by hand by a malicious user the server can still preset the author field with the right $long_name?


Ok, you're right. But that requires quite some knowledge to change the generated HTML by hand. So for paranoiac people the "Subst" might be better. Actually you could have both the "Preset on Reply" and the "Subst on Reply", so on the reply entry form one sees already the correct author.
  1326   Tue Jul 26 10:55:03 2005 Reply Emiliano GabrielliAlberT@SuperAlberT.itQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Stefan Ritt wrote:

Emiliano Gabrielli wrote:
Substitute is the only way I have to be assure it is as I want ...


No, that's not true. A
Locked attributes = Author

will do the job as well.


I can't argue how it works ...
The following code will assure that, if the HTML generated by elog would be modified by hand by a malicious user the server can still preset the author field with the right $long_name?
Locked attributes = Author
Preset on Reply Author = $long_name

how works in details the "Locked Attribute" parameter then ?? ...
  1325   Tue Jul 26 10:51:12 2005 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Emiliano Gabrielli wrote:
Substitute is the only way I have to be assure it is as I want ...


No, that's not true. A
Locked attributes = Author

will do the job as well.
  1324   Tue Jul 26 10:49:12 2005 Entry Emiliano GabrielliAlberT@SuperAlberT.itQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Stefan Ritt wrote:

Chris Green wrote:
1) With the configuration below, I can't set the Author attribute to be the author of the reply. As written, it gives the Author field as blank. If the Remove on Reply line is removed, it is set to the parent's author. What am I doing wrong?


Hey, elog made it to MiniBooNE! I'm working on MEG...

What you need is the following:
Preset on reply subject = Re: $subject
Preset Author = $long_name
Preset on Reply Author = $long_name
Locked Attributes = Author

The Subst statements work after the entry gets submitted, while the preset statements work before. So Preset on Reply <attribute> is what you need.


Depending of what your paranoia level is Smile
Substitute is the only way I have to be assure it is as I want ... yes, in real life nobody of my users will never try to change the generated HTML ad replace by hand the Author, but ... Tongue
  1323   Tue Jul 26 10:45:14 2005 Reply Emiliano GabrielliAlberT@SuperAlberT.itRequestAll Re: <img> in Display Attribute

Stefan Ritt wrote:

Emiliano Gabrielli wrote:
donno if a "List Display <Attribute>" could be *the* solution ...


That's a good idea. Unfortunately, "List Display" is already used to specify which attributes to display in list mode. So I changed "Display <attibute>" to "Change <attribute>" and added "List change <attribute>", just to be different from "List display". In principle "List display =" and "List display <attibute> =" can be distinguished by elog, but it could be confusing to have the same option for two different things. The downside is that everybody using "Display <attribute>=" has to change this to "Change <attribute>=".


It works perfectly now Smile thank you Stefan
  1322   Tue Jul 26 10:02:58 2005 Entry Stefan Rittstefan.ritt@psi.chQuestionLinux2.6.0bRe: Can't set Author attribute properly in reply?

Chris Green wrote:
1) With the configuration below, I can't set the Author attribute to be the author of the reply. As written, it gives the Author field as blank. If the Remove on Reply line is removed, it is set to the parent's author. What am I doing wrong?


Hey, elog made it to MiniBooNE! I'm working on MEG...

What you need is the following:
Preset on reply subject = Re: $subject
Preset Author = $long_name
Preset on Reply Author = $long_name
Locked Attributes = Author

The Subst statements work after the entry gets submitted, while the preset statements work before. So Preset on Reply <attribute> is what you need.


Chris Green wrote:
2) With the Page Title line set as shown, $logbook gets expanded as "Charged+Current+Pi+Plus". If the line is left blank, the correct "Charged Current Pi Plus" gets put in the title line.


The substitution $logbook originally produces a valid URL to the logbook, and thus replaces blanks by "+". I changed that so that $logbook produces the original name containing blanks, and $elogbook is the encoded one with the "+"'s. The change is in revision 1.723
ELOG V3.1.5-3fb85fa6