Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 700 of 806  Not logged in ELOG logo
ID Date Icon Author Author Email Category OS ELOG Version Subject
  925   Tue Feb 8 17:40:54 2005 Idea Emiliano GabrielliAlberT@SuperAlberT.itBug fixAll2.5.6 cvs[patch]: fixed wrong extention check
current version uses strstr() to check if the file has the expected ascii
text extension ... this is buggy becouse this way a file named
".txt_hidden_file" or "foo.config.dat" are both seen as .txt files.

the following patch fixes the problem, plz apply to cvs:



#######################################################################
--- elogd_orig.c        2005-02-03 16:46:10.000000000 +0100
+++ elogd_extchk_fix.c  2005-02-08 17:32:21.000000000 +0100
@@ -1160,6 +1160,28 @@

 #define my_toupper(_c)    ( ((_c)>='a' && (_c)<='z') ? ((_c)-'a'+'A') : (_c) )

+static BOOL chkext(const char *str, const char *ext)
+{
+   int extl, strl;
+   char c1, c2;
+
+   if (ext == NULL || str == NULL)
+      return FALSE;
+
+   extl = strlen(ext);
+   strl = strlen(str);
+   if (extl >= strl)
+      return FALSE;
+   str = str+strl-extl;
+   while (*str) {
+      c1 = *str++;
+      c2 = *ext++;
+      if (my_toupper(c1) != my_toupper(c2))
+         return FALSE;
+   }
+   return TRUE;
+}
+
 BOOL strieq(const char *str1, const char *str2)
 {
    char c1, c2;
@@ -1168,6 +1190,8 @@
       return TRUE;
    if (str1 == NULL || str2 == NULL)
       return FALSE;
+   if (strlen(str1)!=strlen(str2))
+      return FALSE;

    while (*str1) {
       c1 = *str1++;
@@ -13698,8 +13722,8 @@
                       ("<tr><td colspan=%d class=\"attachment\">%s %d: <a
href=\"%s\">%s</a>\n",
                        colspan, loc("Attachment"), index + 1, ref,
attachment[index] + 14);

-                  if ((strstr(str, ".TXT") || strstr(str, ".ASC") ||
strstr(str, ".CFG")
-                       || strstr(str, ".CONF")
+                  if ((chkext(str, ".TXT") || chkext(str, ".ASC") ||
chkext(str, ".CFG")
+                       || chkext(str, ".CONF")
                        || strchr(str, '.') == NULL) && show_attachments) {
                      /* display attachment */
                      rsprintf("</td></tr><tr><td colspan=%d
class=\"messagelist\"><pre>", colspan);
@@ -14779,7 +14803,7 @@
    regex_t re_buf[MAX_N_ATTR + 1];
    regmatch_t pmatch[10];

-   /* redirect if enpty parameters */
+   /* redirect if empty parameters */
    if (strstr(_cmdline, "=&")) {
       while ((pt1 = strstr(_cmdline, "=&")) != NULL) {
          pt2 = pt1;
#######################################################################
  924   Tue Feb 8 15:41:55 2005 Agree Emiliano GabrielliAlberT@SuperAlberT.itBug fixLinux2.5.6Re: erroneus encoding
the following patch corrects the problem, plz apply :


--- elogd.c     2005-02-03 16:46:10.000000000 +0100
+++ elogd_albert.c      2005-02-08 15:40:36.000000000 +0100
@@ -6178,7 +6178,7 @@
    if (getcfg("global", "charset", str, sizeof(str)))
       rsprintf("Content-Type: text/html;charset=%s\r\n", str);
    else
-      rsprintf("Content-Type: text/html;charset=%S\r\n", DEFAULT_HTTP_CHARSET);
+      rsprintf("Content-Type: text/html;charset=%s\r\n", DEFAULT_HTTP_CHARSET);

    if (use_keepalive) {
       rsprintf("Connection: Keep-Alive\r\n");
@@ -11267,7 +11267,7 @@
    rsprintf("Server: ELOG HTTP %s\r\n", VERSION);
    rsprintf("Accept-Ranges: bytes\r\n");
    rsprintf("Connection: close\r\n");
-   rsprintf("Content-Type: text/plain;charset=%S\r\n", DEFAULT_HTTP_CHARSET);
+   rsprintf("Content-Type: text/plain;charset=%s\r\n", DEFAULT_HTTP_CHARSET);
    rsprintf("Pragma: no-cache\r\n");
    rsprintf("Expires: Fri, 01 Jan 1983 00:00:00 GMT\r\n\r\n");
  923   Tue Feb 8 14:55:26 2005 Smile Rob de Bruinrdbruin@zernike.nl Linux2.5.6.1Re: Page not found after login or create useraccount
Sorry people,

I did not use de - n host/ip syntax at the startup of elogd.
Now it's working properly.

> As you can see the password is also visable in the addressbar??
> 
> 
> > best all,
> > 
> > I'm having trouble with redirecting after creating an account or login.
> > For example when i create an account with an Admin user when i click on 
> > Save i recieve the following error:
> > Error finding page!
> > And this is what de browser address tels me.
> > 
> > http://192.168.71.26/ZC004/?
> > cmd=Save&new_user_name=zcpvenema&new_full_name=Peter+Venema&new_user_email=p
> > venema@zernike.nl&email_notify=all&newpwd=123456&newpwd2=123456
> > 
> > But when i remove the line frome the ? and than press enter then i'll while 
> > be able to just elog again.
> > 
> > here is my Global cfg file setting.
> > 
> > What did i do wrong??
> > 
> > ########################################
> > 
> > Port = 80
> > Grp = elog 
> > Usr = elog 
> > Password file = /usr/local/elog/elog-2.5.6/passwd
> > User login = /usr/local/elog/elog-2.5.6/passwd
> > Admin user = rdbruin
> > Resource dir = /usr/local/elog/elog-2.5.6/
> > Logbook dir = /usr/local/bin/logbooks/
> > time format = %d %B %Y %H:%M
> > SMTP host = smtp.xs4all.nl
> > Main tab = Startpagina
> > Page Title = Logboeken Zernike College 
> > IOptions Icon = icon1.gif, icon3.gif, icon4.gif, icon5.gif, icon6.gif, 
> > icon7.gif, icon8.gif, icon12.gif, icon13.gif, icon14.gif
> > Submit page = /usr/local/elog/elog-2.5.6/bericht
> > Attributes = Author, Type, Category, Subject, Owner, Email
> > Group Zernike college = Desktops, Servers, Printers, Ribox, Switches, 
> > Routers, Algemeen, Documentatie, XafaX
> > Options OS = Windows XP, Novell, Windows 2003, Windows 2000, Windows 98
> > Options Type = Software, Hardware, Besturingssysteem, Monitor
> > Group Desktops = Harmjan, Helperbrink, Julianalaan, Rummerinkhof, 
> > Westersedrift
> > Group Helperbrink = ZC004, ZC006, ZC026, ZC155, ZC209, ZC241, ZC246, ZC247, 
> > ZC248, ZC267, ZC288, ZC307, ZC308, ZC446, ZC475, ZC600, ZC601, ZC602, 
> > ZC603, ZC604, ZC605, ZC606, ZC607, ZC608, ZC609, ZC610, ZC611, ZC612, 
> > ZC613, ZC614, ZC615, ZC616, ZC617, ZC618, ZC619, ZC620, ZC621, ZC622, 
> > ZC623, ZC624, ZC625, ZC626, ZC627, ZC628, ZC629, ZC630, ZC631, ZC632, 
> > ZC633, ZC634, ZC635, ZC636, ZC637, ZC638, ZC639, ZC640, ZC641, ZC642, 
> > ZC643, ZC644, ZC645, ZC646, ZC647, ZC648, ZC649, ZC650, ZC651, ZC652, 
> > ZC653, ZC654, ZC655, ZC656, ZC657, ZC658, ZC659, ZC660, ZC662, ZC708, 
> > ZC712, ZC707, ZC711, ZC900, ZC901, ZC902, ZC903, ZC904, ZC905, ZC906, 
> > ZC907, ZC908, ZC909, ZC910, ZC911, ZC912, ZC913, ZC914, ZC915, ZC916, 
> > ZC917, ZC918, ZC919, ZC920, ZC921, ZC922, ZC923
> > Group Servers = HJZ1, HPB2, HRN1, HRN2, RHF1, ZDL1, ZC-ROOT1, ZC-ROOT2
> > Group Ribox = HPB, HJZ, HRN, WD, ZDL
> > Group Printers = HP, Canon
> > Group HP = 4L, 6L, 2100, 4000, 4050, 4550 kleur, 8000
> > Group Documentatie = Administratief, Educatief, Systeembeheer, Software, 
> > Hardware
> > Group Xafax = Pasjes, Chipnet, Smartprinter, Docs
> > 
> > ###################################################
  922   Tue Feb 8 14:49:40 2005 Smile Rob de Bruinrdbruin@zernike.nl Linux2.5.6.1Re: Page not found after login or create useraccount
Sorry people,

I did not use de - n host/ip syntax at the startup of elogd.
Now it's working properly.

> As you can see the password is also visable in the addressbar??
> 
> 
> > best all,
> > 
> > I'm having trouble with redirecting after creating an account or login.
> > For example when i create an account with an Admin user when i click on 
> > Save i recieve the following error:
> > Error finding page!
> > And this is what de browser address tels me.
> > 
> > http://192.168.71.26/ZC004/?
> > cmd=Save&new_user_name=zcpvenema&new_full_name=Peter+Venema&new_user_email=p
> > venema@zernike.nl&email_notify=all&newpwd=123456&newpwd2=123456
> > 
> > But when i remove the line frome the ? and than press enter then i'll while 
> > be able to just elog again.
> > 
> > here is my Global cfg file setting.
> > 
> > What did i do wrong??
> > 
> > ########################################
> > 
> > Port = 80
> > Grp = elog 
> > Usr = elog 
> > Password file = /usr/local/elog/elog-2.5.6/passwd
> > User login = /usr/local/elog/elog-2.5.6/passwd
> > Admin user = rdbruin
> > Resource dir = /usr/local/elog/elog-2.5.6/
> > Logbook dir = /usr/local/bin/logbooks/
> > time format = %d %B %Y %H:%M
> > SMTP host = smtp.xs4all.nl
> > Main tab = Startpagina
> > Page Title = Logboeken Zernike College 
> > IOptions Icon = icon1.gif, icon3.gif, icon4.gif, icon5.gif, icon6.gif, 
> > icon7.gif, icon8.gif, icon12.gif, icon13.gif, icon14.gif
> > Submit page = /usr/local/elog/elog-2.5.6/bericht
> > Attributes = Author, Type, Category, Subject, Owner, Email
> > Group Zernike college = Desktops, Servers, Printers, Ribox, Switches, 
> > Routers, Algemeen, Documentatie, XafaX
> > Options OS = Windows XP, Novell, Windows 2003, Windows 2000, Windows 98
> > Options Type = Software, Hardware, Besturingssysteem, Monitor
> > Group Desktops = Harmjan, Helperbrink, Julianalaan, Rummerinkhof, 
> > Westersedrift
> > Group Helperbrink = ZC004, ZC006, ZC026, ZC155, ZC209, ZC241, ZC246, ZC247, 
> > ZC248, ZC267, ZC288, ZC307, ZC308, ZC446, ZC475, ZC600, ZC601, ZC602, 
> > ZC603, ZC604, ZC605, ZC606, ZC607, ZC608, ZC609, ZC610, ZC611, ZC612, 
> > ZC613, ZC614, ZC615, ZC616, ZC617, ZC618, ZC619, ZC620, ZC621, ZC622, 
> > ZC623, ZC624, ZC625, ZC626, ZC627, ZC628, ZC629, ZC630, ZC631, ZC632, 
> > ZC633, ZC634, ZC635, ZC636, ZC637, ZC638, ZC639, ZC640, ZC641, ZC642, 
> > ZC643, ZC644, ZC645, ZC646, ZC647, ZC648, ZC649, ZC650, ZC651, ZC652, 
> > ZC653, ZC654, ZC655, ZC656, ZC657, ZC658, ZC659, ZC660, ZC662, ZC708, 
> > ZC712, ZC707, ZC711, ZC900, ZC901, ZC902, ZC903, ZC904, ZC905, ZC906, 
> > ZC907, ZC908, ZC909, ZC910, ZC911, ZC912, ZC913, ZC914, ZC915, ZC916, 
> > ZC917, ZC918, ZC919, ZC920, ZC921, ZC922, ZC923
> > Group Servers = HJZ1, HPB2, HRN1, HRN2, RHF1, ZDL1, ZC-ROOT1, ZC-ROOT2
> > Group Ribox = HPB, HJZ, HRN, WD, ZDL
> > Group Printers = HP, Canon
> > Group HP = 4L, 6L, 2100, 4000, 4050, 4550 kleur, 8000
> > Group Documentatie = Administratief, Educatief, Systeembeheer, Software, 
> > Hardware
> > Group Xafax = Pasjes, Chipnet, Smartprinter, Docs
> > 
> > ###################################################
  921   Tue Feb 8 13:13:22 2005 Blink Emiliano GabrielliAlberT@SuperAlberT.itBug reportLinux2.5.6Re: preselected values and conditional options
 up :-)
  920   Tue Feb 8 13:11:30 2005 Warning Emiliano GabrielliAlberT@SuperAlberT.itBug reportAll2.5.6Re: HTML 4.1 transitional validation fails
> as this url shows http://www.htmlhelp.com/tools/validator/problems.html#amp

> it should be used an HTML entity instead of the ampersand sign.<p> another problem with validation: required attribute "ALT" not specified in every <img> tag used in the elog (icons) here is an example of the validator results: http://validator.w3.org/check?uri=http%3A%2F%2Fmidas.psi.ch%2Felogs%2FLinux+Demo%2F&charset=iso-8859-1+%28Western+Europe%29&verbose=1
  918   Tue Feb 8 13:00:40 2005 Warning Emiliano GabrielliAlberT@SuperAlberT.itBug reportLinux2.5.6erroneus encoding
elog sends wrong HTTP headers, charset is empty and not separed from the
next one "Connection: Keep-Alive ... this bug tells the browser that the
encoding is "connection:" ... that is wrong.

root@emc2:/home/albert# GET -USde http://midas.psi.ch/elogs/Forum/
GET http://midas.psi.ch/elogs/Forum/
User-Agent: lwp-request/2.06

GET http://midas.psi.ch/elogs/Forum/ --> 200 Document follows
Connection: close
Date: Tue, 08 Feb 2005 11:54:40 GMT
Pragma: no-cache
Server: ELOG HTTP 2.5.6-2
Content-Type: text/html;charset=Connection: Keep-Alive
Expires: Fri, 01 Jan 1983 00:00:00 GMT
.....
....


this is the problem from validator point of viev:
http://validator.w3.org/check?uri=http%3A%2F%2Fmidas.psi.ch%2Felogs%2FForum%2F&charset=%28detect+automatically%29&doctype=%28detect+automatically%29&ss=1&verbose=1
  917   Tue Feb 8 12:39:53 2005 Warning Emiliano GabrielliAlberT@SuperAlberT.itRequestLinux2.5.6Re: images attached shown as inline
> > uhm ok .. can I expect to get a release with this feature in the near future ?
> 
> I checked how I would do that and did not find a good solution. If I put a
> 
> <img width=300 ...> 
> 
> for example, this scales down a big picture to only 300 pixels width. But if you submit a small
> picture, like just an icon, it blows it up to 300 pixels as well, which does not look nice.
> Unfortunatle I don't know of any option like "maxwidth=x" which only scales pictures down if they
> are larger than x. Do you know?

the following should do the job:

<table><TR><TD width="200">
<img src="IMG_3133.jpg" width="100%">
</TD></TR></table>

or (better I think)

<div style="width: 200px">
<img src="IMG_3133.jpg" style="width: 100%" />
</div>

the configurable parameter should be with obviously :-)
ELOG V3.1.5-3fb85fa6