I have posted a new version of Anlgform.exe available from this page:

  http://www.wadsack-allen.com/products/analog.html#anlgform

In addition to allowing wildcard characters in LOGFILE values, it also
fixes the security bug that was in all previous versions:

  http://analog.cx/security5.html

--

Jeremy Wadsack
Wadsack-Allen Digital Group


[EMAIL PROTECTED] ([EMAIL PROTECTED]; Thursday, August 08, 
2002 10:19 AM):


> Thanks for the quick reply.  I would appreciate it if you would recompile
> Analogform.exe.

> I did, however, discover a workaround.  Simply leave that LOGFILE line out
> of the html file, use a CONFIGFILE line in anlgform.cfg (hadn't noticed
> that before...) and then include the logfiles in the Analog config file
> instead.



> "Jeremy Wadsack" <[EMAIL PROTECTED]>


> [EMAIL PROTECTED] ([EMAIL PROTECTED]; Thursday,
> August 08, 2002 7:31 AM):

>> I want to analyze all of my log files, so, in anlgform.html I set the
>> LOGFORM line like this (I'm leaving out the less-than and greater-thans
> in
>> this email):

>> input type=hidden name="LOGFILE" value="web_log_address\*.log"

>> I've also tried:

>> input type=hidden name="LOGFILE" value="web_log_address\??????.log"

>> I always get an error message like this:


>> Illegal Request
>> Unsafe characters in LOGFILE. Died at anlgform.exe line 189. [Thu Aug 8
>> 08:57:08 2002] form_address\anlgform.exe: Unsafe characters in "LOGFILE
>> web_log_address\*.log" on request from MY IP ADDRESS


>> When I put in the address for a single log file, it works fine.  I looked
>> at the docs, and they seem to say that ? and * characters are ok.  I'm
> not
>> reading this wrong, am I?

>> "The arguments to LOGFILE and CACHEFILE commands are checked for
>> containing only certain allowed characters (specifically, letters,
>> digits, /\.:_*? space, and - between two {letter, digit,
>> underscore}'s)."

>> I'm using a Windows machine (2000, I think,) Analog version 5.24, and
>> Anlgform.exe version 4.11.


> In version 4.11, Analog did not allow wildcard characters. I will try
> to compile an update to Analogform.exe today or tomorrow so that it
> matches the current version.


> --

> Jeremy Wadsack
> Wadsack-Allen Digital Group

+------------------------------------------------------------------------
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|    http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|    http://www.mail-archive.com/[email protected]/
|    http://lists.isite.net/listgate/analog-help/archives/
|    http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------

Reply via email to