Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 671 of 807  Not logged in ELOG logo
New entries since:Thu Jan 1 01:00:00 1970
ID Date Icon Author Author Email Category OS ELOG Version Subject
  1160   Mon May 30 10:01:14 2005 Blink Alex Halex@synergie-inf.comRequest 2.5.8-6Re: password encryption

Stefan Ritt wrote:

Alex H wrote:
Hi Stefan,

I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex


Unfortunately there is no real way around that. If a password is entered into a text box, it is always transferred in plain text (which means that in security-sensive installations one should always use SSL together with elog). I encrypt it on the server side and do an immediate redirect which "hided" the plain password, but if your connection is slow, you might see it for a moment. Unless nobody has a clever idea of how to prevent this, we're out of luck.


Oki Thanks for the answer Smile.

Alex
  1159   Fri May 27 14:48:05 2005 Warning Stefan Rittstefan.ritt@psi.chRequest 2.5.8-6Re: password encryption

Alex H wrote:
Hi Stefan,

I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex


Unfortunately there is no real way around that. If a password is entered into a text box, it is always transferred in plain text (which means that in security-sensive installations one should always use SSL together with elog). I encrypt it on the server side and do an immediate redirect which "hided" the plain password, but if your connection is slow, you might see it for a moment. Unless nobody has a clever idea of how to prevent this, we're out of luck.
  1158   Tue May 24 20:32:08 2005 Entry Andynekto@myway.com   Problem with auto-increment attribute
I have a very strange problem with auto-increment attribute. Here is a part of my configuration:

Attributes = Access ID, Harvest Date, Access, Species, PI, Submission date, Stain, Comments
Preset Access ID = MI-05-%03d
Type Harvest date = date
Type Submission date = date

I tried to add new entry, and it's Access ID is MI-05-001. But when I'm adding another entries,
there Access ID is MI-05-006
I found only one mention of using increment in documentation.
What I'm doing wrong?
  1157   Mon May 23 17:47:24 2005 Entry David Spindlerdsspindler@earthlink.netBug reportWindows2.6.0-betaRe: Incorrect Display
Never mind. I figured it out. I used two fields (date and time) that are automatically placed in elog. It messed up the spacing, altough what was puzzling was that it displayed correctly on the entry itself, but not the list. Anyway, I renamed the date and time to another name and it is ok.

Thanks, anyway. Keep up the good work.


David Spindler wrote:

David Spindler wrote:
I hope this is the correct place for an apparent bug report. The display is incorrect except when displaying a particular entry. I just downloaded 2.6.0-beta thinking I was getting 2.5.9. Nice surprise. The elcode (bbcode? ) is a great idea, but the display, when showing the main screen of a logbook does not have the correct fields showing in the correct places. I will attach two screen captures for illustraton. Never mind, I guess not. It is not letting me upload the screen captures. On the main screen, for example, my field contents for "Route" appear in the "Text" field. But when on the specific entry screen, these field contents are in the correct field. I will be glad to eamil the screen captures, if anyone wants.

I am running Firefox 1.0.3 (same results with IE 6, BTW), on a WinXP OS (sorry fellows, but I am still in process of learning Linux, so I have not tried this version of elog on it, yet), on a Gateway 2.2 GHZ, 1 GB RAM PC.


BTW, I love elog and have it running at work. It is being used extensively.


I guess it did upload. Here is the other screen capture.

BTW, I received the following message upon submitting my last post:
Quote:
"Error sending Email via "mailsend.psi.ch": malformed address: <>"
  1156   Sat May 21 15:23:08 2005 Entry David Spindlerdsspindler@earthlink.netBug reportWindows2.6.0-betaRe: Incorrect Display

David Spindler wrote:
I hope this is the correct place for an apparent bug report. The display is incorrect except when displaying a particular entry. I just downloaded 2.6.0-beta thinking I was getting 2.5.9. Nice surprise. The elcode (bbcode? ) is a great idea, but the display, when showing the main screen of a logbook does not have the correct fields showing in the correct places. I will attach two screen captures for illustraton. Never mind, I guess not. It is not letting me upload the screen captures. On the main screen, for example, my field contents for "Route" appear in the "Text" field. But when on the specific entry screen, these field contents are in the correct field. I will be glad to eamil the screen captures, if anyone wants.

I am running Firefox 1.0.3 (same results with IE 6, BTW), on a WinXP OS (sorry fellows, but I am still in process of learning Linux, so I have not tried this version of elog on it, yet), on a Gateway 2.2 GHZ, 1 GB RAM PC.


BTW, I love elog and have it running at work. It is being used extensively.


I guess it did upload. Here is the other screen capture.

BTW, I received the following message upon submitting my last post:
Quote:
"Error sending Email via "mailsend.psi.ch": malformed address: <>"
Attachment 1: capture-firefox-1.03-log-entry.JPG
capture-firefox-1.03-log-entry.JPG
  1155   Sat May 21 15:05:23 2005 Entry David Spindlerdsspindler@earthlink.netBug reportWindows2.6.0-betaIncorrect Display
I hope this is the correct place for an apparent bug report. The display is incorrect except when displaying a particular entry. I just downloaded 2.6.0-beta thinking I was getting 2.5.9. Nice surprise. The elcode (bbcode? ) is a great idea, but the display, when showing the main screen of a logbook does not have the correct fields showing in the correct places. I will attach two screen captures for illustraton. Never mind, I guess not. It is not letting me upload the screen captures. On the main screen, for example, my field contents for "Route" appear in the "Text" field. But when on the specific entry screen, these field contents are in the correct field. I will be glad to eamil the screen captures, if anyone wants.

I am running Firefox 1.0.3 (same results with IE 6, BTW), on a WinXP OS (sorry fellows, but I am still in process of learning Linux, so I have not tried this version of elog on it, yet), on a Gateway 2.2 GHZ, 1 GB RAM PC.


BTW, I love elog and have it running at work. It is being used extensively.
Attachment 1: capture-firefox-1.03.JPG
capture-firefox-1.03.JPG
  1154   Fri May 20 14:40:12 2005 Warning Alex Halex@synergie-inf.comRequest 2.5.8-6password encryption
Hi Stefan,

I have found a little problem with elog. I'am using ELOG V2.5.8-6. When I'am on the logon page,
I type my Login and password and hit "submit", in the bottom of IE, we can show my password without encryption, it can be dangerous. I have made a screenshot to explain my problem better.
Could you fix it for the next release ?
Thanks a lot.
Alex
Attachment 1: password.gif
password.gif
  1153   Wed May 18 19:52:41 2005 Reply Stefan Rittstefan.ritt@psi.chBug report ?Re: error message from this forum

Heiko Scheit wrote:
Just after submitting the last message, the following error message was displayed:

Error sending Email via "mailsend.psi.ch": malformed address: synergie-infcom>


Sombody used an invalid formed email address, like user<at>domain<dot>com, on which the SMTP server complained. I would like to note here that the email addresses registered in this forum are not published in any way, so there is no risk to get spam from that (except the normal elog notifications, which can be turned off easily).
ELOG V3.1.5-3fb85fa6