| ID |
Date |
Icon |
Author |
Author Email |
Category |
OS |
ELOG Version |
Subject |
|
1161
|
Mon May 30 19:18:34 2005 |
 | Gary Clayson | g_clayson@sbcglobal.net | Request | Windows | 2.5.8-6 | Re: password encryption | Hello Alex and Stefan,
I know of only one way to "hide" the text of the status bar in a web browser;
use JavaScript - specifically the status method (as in the following example):
<!-- the following goes in the body of the document, perhaps in a link. -->
<!-- sample link -->
<a href="javascript://place link url here"
onMouseOver="window.status='Status Bar Text Goes Here'; return true">Link Text Here</a>
<!-- place the following script in the head of the document -->
<script language="JavaScript" type="text/javascript"><!--
window.defaultStatus="Default Status Bar Text Here";
--></script>
Of course the above only works in those browsers that support javascripting,
but it is one way to hide the actual text of links from the user.
Hopefully this helps you!
Gary Clayson
| Alex H wrote: | Hi Stefan,
I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex |
|
|
1160
|
Mon May 30 10:01:14 2005 |
 | Alex H | alex@synergie-inf.com | Request | | 2.5.8-6 | Re: password encryption |
| Stefan Ritt wrote: |
| Alex H wrote: | Hi Stefan,
I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex |
Unfortunately there is no real way around that. If a password is entered into a text box, it is always transferred in plain text (which means that in security-sensive installations one should always use SSL together with elog). I encrypt it on the server side and do an immediate redirect which "hided" the plain password, but if your connection is slow, you might see it for a moment. Unless nobody has a clever idea of how to prevent this, we're out of luck. |
Oki Thanks for the answer  .
Alex |
|
1159
|
Fri May 27 14:48:05 2005 |
 | Stefan Ritt | stefan.ritt@psi.ch | Request | | 2.5.8-6 | Re: password encryption |
| Alex H wrote: | Hi Stefan,
I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex |
Unfortunately there is no real way around that. If a password is entered into a text box, it is always transferred in plain text (which means that in security-sensive installations one should always use SSL together with elog). I encrypt it on the server side and do an immediate redirect which "hided" the plain password, but if your connection is slow, you might see it for a moment. Unless nobody has a clever idea of how to prevent this, we're out of luck. |
|
1158
|
Tue May 24 20:32:08 2005 |
 | Andy | nekto@myway.com | | | | Problem with auto-increment attribute | I have a very strange problem with auto-increment attribute. Here is a part of my configuration:
Attributes = Access ID, Harvest Date, Access, Species, PI, Submission date, Stain, Comments
Preset Access ID = MI-05-%03d
Type Harvest date = date
Type Submission date = date
I tried to add new entry, and it's Access ID is MI-05-001. But when I'm adding another entries,
there Access ID is MI-05-006
I found only one mention of using increment in documentation.
What I'm doing wrong? |
|
1157
|
Mon May 23 17:47:24 2005 |
| David Spindler | dsspindler@earthlink.net | Bug report | Windows | 2.6.0-beta | Re: Incorrect Display | Never mind. I figured it out. I used two fields (date and time) that are automatically placed in elog. It messed up the spacing, altough what was puzzling was that it displayed correctly on the entry itself, but not the list. Anyway, I renamed the date and time to another name and it is ok.
Thanks, anyway. Keep up the good work.
| David Spindler wrote: |
| David Spindler wrote: | I hope this is the correct place for an apparent bug report. The display is incorrect except when displaying a particular entry. I just downloaded 2.6.0-beta thinking I was getting 2.5.9. Nice surprise. The elcode (bbcode? ) is a great idea, but the display, when showing the main screen of a logbook does not have the correct fields showing in the correct places. I will attach two screen captures for illustraton. Never mind, I guess not. It is not letting me upload the screen captures. On the main screen, for example, my field contents for "Route" appear in the "Text" field. But when on the specific entry screen, these field contents are in the correct field. I will be glad to eamil the screen captures, if anyone wants.
I am running Firefox 1.0.3 (same results with IE 6, BTW), on a WinXP OS (sorry fellows, but I am still in process of learning Linux, so I have not tried this version of elog on it, yet), on a Gateway 2.2 GHZ, 1 GB RAM PC.
BTW, I love elog and have it running at work. It is being used extensively. |
I guess it did upload. Here is the other screen capture.
BTW, I received the following message upon submitting my last post:
| Quote: | | "Error sending Email via "mailsend.psi.ch": malformed address: <>" |
|
|
|
1156
|
Sat May 21 15:23:08 2005 |
| David Spindler | dsspindler@earthlink.net | Bug report | Windows | 2.6.0-beta | Re: Incorrect Display |
| David Spindler wrote: | I hope this is the correct place for an apparent bug report. The display is incorrect except when displaying a particular entry. I just downloaded 2.6.0-beta thinking I was getting 2.5.9. Nice surprise. The elcode (bbcode? ) is a great idea, but the display, when showing the main screen of a logbook does not have the correct fields showing in the correct places. I will attach two screen captures for illustraton. Never mind, I guess not. It is not letting me upload the screen captures. On the main screen, for example, my field contents for "Route" appear in the "Text" field. But when on the specific entry screen, these field contents are in the correct field. I will be glad to eamil the screen captures, if anyone wants.
I am running Firefox 1.0.3 (same results with IE 6, BTW), on a WinXP OS (sorry fellows, but I am still in process of learning Linux, so I have not tried this version of elog on it, yet), on a Gateway 2.2 GHZ, 1 GB RAM PC.
BTW, I love elog and have it running at work. It is being used extensively. |
I guess it did upload. Here is the other screen capture.
BTW, I received the following message upon submitting my last post:
| Quote: | | "Error sending Email via "mailsend.psi.ch": malformed address: <>" |
|
| Attachment 1: capture-firefox-1.03-log-entry.JPG
|
|
|
1155
|
Sat May 21 15:05:23 2005 |
| David Spindler | dsspindler@earthlink.net | Bug report | Windows | 2.6.0-beta | Incorrect Display | I hope this is the correct place for an apparent bug report. The display is incorrect except when displaying a particular entry. I just downloaded 2.6.0-beta thinking I was getting 2.5.9. Nice surprise. The elcode (bbcode? ) is a great idea, but the display, when showing the main screen of a logbook does not have the correct fields showing in the correct places. I will attach two screen captures for illustraton. Never mind, I guess not. It is not letting me upload the screen captures. On the main screen, for example, my field contents for "Route" appear in the "Text" field. But when on the specific entry screen, these field contents are in the correct field. I will be glad to eamil the screen captures, if anyone wants.
I am running Firefox 1.0.3 (same results with IE 6, BTW), on a WinXP OS (sorry fellows, but I am still in process of learning Linux, so I have not tried this version of elog on it, yet), on a Gateway 2.2 GHZ, 1 GB RAM PC.
BTW, I love elog and have it running at work. It is being used extensively. |
| Attachment 1: capture-firefox-1.03.JPG
|
|
|
1154
|
Fri May 20 14:40:12 2005 |
| Alex H | alex@synergie-inf.com | Request | | 2.5.8-6 | password encryption | Hi Stefan,
I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex |
| Attachment 1: password.gif
|
|
|