You can subscribe to this list here.
2001 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(28) |
Nov
(58) |
Dec
(85) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2002 |
Jan
(125) |
Feb
(222) |
Mar
(274) |
Apr
(51) |
May
(22) |
Jun
(50) |
Jul
(15) |
Aug
(33) |
Sep
(11) |
Oct
(29) |
Nov
(17) |
Dec
(1) |
2003 |
Jan
(100) |
Feb
(21) |
Mar
(7) |
Apr
(45) |
May
|
Jun
(43) |
Jul
(27) |
Aug
(24) |
Sep
|
Oct
|
Nov
|
Dec
|
2004 |
Jan
(1) |
Feb
|
Mar
(13) |
Apr
|
May
(1) |
Jun
|
Jul
|
Aug
(7) |
Sep
|
Oct
|
Nov
|
Dec
(4) |
2005 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(1) |
From: Rob H. <for...@us...> - 2003-02-24 06:59:37
|
Update of /cvsroot/sandweb/sandweb In directory sc8-pr-cvs1:/tmp/cvs-serv2896 Modified Files: ChangeLog Log Message: updating for beta release Index: ChangeLog =================================================================== RCS file: /cvsroot/sandweb/sandweb/ChangeLog,v retrieving revision 1.3 retrieving revision 1.4 diff -U2 -r1.3 -r1.4 --- ChangeLog 24 Feb 2003 06:58:41 -0000 1.3 +++ ChangeLog 24 Feb 2003 06:59:32 -0000 1.4 @@ -1,2 +1,6 @@ +2003-02-23 22:58 formnull + + * ChangeLog, INSTALL: getting ready for beta.. + 2003-02-10 22:37 formnull |
From: Rob H. <for...@us...> - 2003-02-24 06:58:44
|
Update of /cvsroot/sandweb/sandweb In directory sc8-pr-cvs1:/tmp/cvs-serv2606 Modified Files: ChangeLog INSTALL Log Message: getting ready for beta.. Index: ChangeLog =================================================================== RCS file: /cvsroot/sandweb/sandweb/ChangeLog,v retrieving revision 1.2 retrieving revision 1.3 diff -U2 -r1.2 -r1.3 --- ChangeLog 10 Feb 2003 07:20:54 -0000 1.2 +++ ChangeLog 24 Feb 2003 06:58:41 -0000 1.3 @@ -1,2 +1,11 @@ +2003-02-10 22:37 formnull + + * lib/SandWeb/: Security.pm, Repository/cvs.pm: fixed security + problem, only way around it apparently is to not allow " :( + +2003-02-09 23:20 formnull + + * ChangeLog: Changelog generated by cvs2cl for BETA-1 + 2003-02-09 23:15 formnull Index: INSTALL =================================================================== RCS file: /cvsroot/sandweb/sandweb/INSTALL,v retrieving revision 1.13 retrieving revision 1.14 diff -U2 -r1.13 -r1.14 --- INSTALL 4 Feb 2003 22:14:37 -0000 1.13 +++ INSTALL 24 Feb 2003 06:58:41 -0000 1.14 @@ -77,6 +77,5 @@ default is to *not* have these permissions for the 'www' user. - * In this BETA release, 'cvs' must be installed on the system in order - to *do* anything. - - + * The apache user must be running "bash". Regular Bourne "sh" will probably + work too, but this has not been tested. SandWeb is known to NOT work + with ksh ( the Korn shell ). |
From: Rob H. <for...@us...> - 2003-02-11 06:37:27
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb/Repository In directory sc8-pr-cvs1:/tmp/cvs-serv2778/lib/SandWeb/Repository Modified Files: cvs.pm Log Message: fixed security problem, only way around it apparently is to not allow " :( Index: cvs.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Repository/cvs.pm,v retrieving revision 1.41 retrieving revision 1.42 diff -U2 -r1.41 -r1.42 --- cvs.pm 10 Feb 2003 07:15:23 -0000 1.41 +++ cvs.pm 11 Feb 2003 06:37:24 -0000 1.42 @@ -2108,5 +2108,5 @@ if ($force) { push @param, " -f" }; if ($check) { push @param, " -c" }; - if ($name) { push @param, " $name" }; + if ($name) { push @param, " \\\"$name\\\"" }; $log->debug("Performing tag operation"); @@ -2284,5 +2284,12 @@ my $clobber = $params{'clobber'}; my $directories = $params{'directories'}; - my $rev = $params{'rev'}; + my $unsafe_rev = $params{'rev'}; + + # Security check + my $secure = SandWeb::Security->new(); + my $rev = $secure->shell( + characters => "$unsafe_rev" + ); + my $date = $params{'date'}; my $merge = $params{'merge'}; @@ -2296,5 +2303,5 @@ if ($clobber) { push @param, " -C" }; if ($directories) { push @param, " -d" }; - if ($rev) { push @param, " -r$rev" }; + if ($rev) { push @param, " -r \\\"$rev\\\"" }; if ($date) { push @param, " -D" }; if ($merge) { push @param, " -j" }; |
From: Rob H. <for...@us...> - 2003-02-11 06:37:27
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb In directory sc8-pr-cvs1:/tmp/cvs-serv2778/lib/SandWeb Modified Files: Security.pm Log Message: fixed security problem, only way around it apparently is to not allow " :( Index: Security.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Security.pm,v retrieving revision 1.4 retrieving revision 1.5 diff -U2 -r1.4 -r1.5 --- Security.pm 14 Jan 2003 07:25:01 -0000 1.4 +++ Security.pm 11 Feb 2003 06:37:23 -0000 1.5 @@ -181,4 +181,7 @@ my $characters = $args{'characters'}; + # Security check - erase forbidden characters + $characters =~ s/\"//g; + # Security check - escape unsafe characters $characters =~ s/([\<\>\\\&;\`\'\|\"*\?\~\^\(\)\[\]\{\}\$])/\\$1/g; |
From: Rob H. <for...@us...> - 2003-02-10 07:20:58
|
Update of /cvsroot/sandweb/sandweb In directory sc8-pr-cvs1:/tmp/cvs-serv23441 Modified Files: ChangeLog Log Message: Changelog generated by cvs2cl for BETA-1 Index: ChangeLog =================================================================== RCS file: /cvsroot/sandweb/sandweb/ChangeLog,v retrieving revision 1.1 retrieving revision 1.2 diff -U2 -r1.1 -r1.2 --- ChangeLog 28 Mar 2002 07:17:32 -0000 1.1 +++ ChangeLog 10 Feb 2003 07:20:54 -0000 1.2 @@ -1,2 +1,1536 @@ +2003-02-09 23:15 formnull + + * etc/sandweb.cfg: turning debug off by default + +2003-02-09 23:15 formnull + + * lib/SandWeb/Repository/cvs.pm: finally got the damn quote + escaping right, should be able to prevent attempts to get directly + to the shell. + +2003-02-04 14:14 formnull [...1802 lines suppressed...] - templates/framework.html, templates/login.html, + etc/sandweb.cfg, templates/framework.html, templates/login.html, templates/logo_CWC.png, templates/menu_bar.html, templates/template.html: Initial revision @@ -4440,14 +5860,7 @@ * bin/sandweb.cgi, lib/SandWeb.pm, lib/SandWeb/Config.pm, lib/SandWeb/ErrHndlr.pm, lib/SandWeb/Log.pm, lib/SandWeb/UI.pm, - doc/auth-spec.txt, doc/features.list, doc/pod/CHANGES.pod, - doc/pod/INSTALL.pod, doc/pod/PODmaster.pod, doc/pod/README.pod, - doc/pod/admin_guide.pod, doc/pod/history.pod, - doc/pod/security_guide.pod, doc/pod/user_guide.pod, lib/SandWeb/Auth.pm, var/data/cookies, var/data/info.txt, var/log/cvswebclient.log, var/log/info.txt, var/log/sandweb.loh, - var/work/info.txt, ext_mods/HTML-Template-2.2.tar.gz, - ext_mods/XML-Simple-1.05.tar.gz, ext_mods/XML-Parser.2.30.tar.gz, - etc/sandweb.cfg, ext_mods/expat-1.95.1.tar.gz, - templates/framework.html, templates/login.html, + etc/sandweb.cfg, templates/framework.html, templates/login.html, templates/logo_CWC.png, templates/menu_bar.html, templates/template.html: importing SandWeb code from |
From: Rob H. <for...@us...> - 2003-02-10 07:15:40
|
Update of /cvsroot/sandweb/sandweb/etc In directory sc8-pr-cvs1:/tmp/cvs-serv20677/etc Modified Files: sandweb.cfg Log Message: turning debug off by default Index: sandweb.cfg =================================================================== RCS file: /cvsroot/sandweb/sandweb/etc/sandweb.cfg,v retrieving revision 1.27 retrieving revision 1.28 diff -U2 -r1.27 -r1.28 --- sandweb.cfg 6 Jan 2003 08:51:55 -0000 1.27 +++ sandweb.cfg 10 Feb 2003 07:15:36 -0000 1.28 @@ -3,5 +3,5 @@ <!-- config tree for logging behavior --> - <logging debug="1" + <logging debug="0" log="1" /> |
From: Rob H. <for...@us...> - 2003-02-10 07:15:30
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb/Repository In directory sc8-pr-cvs1:/tmp/cvs-serv20220/lib/SandWeb/Repository Modified Files: cvs.pm Log Message: finally got the damn quote escaping right, should be able to prevent attempts to get directly to the shell. Index: cvs.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Repository/cvs.pm,v retrieving revision 1.40 retrieving revision 1.41 diff -U2 -r1.40 -r1.41 --- cvs.pm 3 Feb 2003 20:56:04 -0000 1.40 +++ cvs.pm 10 Feb 2003 07:15:23 -0000 1.41 @@ -696,5 +696,5 @@ ); - push @param, " -m \'$message\'"; + push @param, " -m \\\"$message\\\""; if ($log) { $log->debug("Performing commit operation"); |
From: Rob H. <for...@us...> - 2003-02-04 22:14:40
|
Update of /cvsroot/sandweb/sandweb In directory sc8-pr-cvs1:/tmp/cvs-serv13594 Modified Files: INSTALL Log Message: added bash as a required Unix program Index: INSTALL =================================================================== RCS file: /cvsroot/sandweb/sandweb/INSTALL,v retrieving revision 1.12 retrieving revision 1.13 diff -U2 -r1.12 -r1.13 --- INSTALL 3 Feb 2003 22:37:40 -0000 1.12 +++ INSTALL 4 Feb 2003 22:14:37 -0000 1.13 @@ -14,9 +14,11 @@ * expect ( tested with 5.2.1 ), available from http://expect.nist.gov * file ( tested with 3.28-1 ), available from - ftp://ftp.gw.com/mirrors/pub/unix/file/ + ftp://ftp.gw.com/mirrors/pub/unix/file/ * apache ( tested with 1.3.x ), available from http://www.apache.org * make ( testing with 3.x ), available from http://www.gnu.org * cvs ( tested with 1.11 ), available from http://www.cvshome.org + * bash ( tested with 2.05a ), available from + http://www.gnu.org/software/bash/bash.html |
From: Rob H. <for...@us...> - 2003-02-03 22:37:45
|
Update of /cvsroot/sandweb/sandweb In directory sc8-pr-cvs1:/tmp/cvs-serv23019 Modified Files: INSTALL Log Message: oops, expect link was wrong. corrected. Index: INSTALL =================================================================== RCS file: /cvsroot/sandweb/sandweb/INSTALL,v retrieving revision 1.11 retrieving revision 1.12 diff -U2 -r1.11 -r1.12 --- INSTALL 7 Jan 2003 03:56:49 -0000 1.11 +++ INSTALL 3 Feb 2003 22:37:40 -0000 1.12 @@ -12,5 +12,5 @@ * perl ( tested with 5.6 ), available from http:/www.perl.org - * expect ( tested with 5.2.1 ), available from http://expect.nis.gov + * expect ( tested with 5.2.1 ), available from http://expect.nist.gov * file ( tested with 3.28-1 ), available from ftp://ftp.gw.com/mirrors/pub/unix/file/ |
From: Rob H. <for...@us...> - 2003-02-03 20:56:36
|
Update of /cvsroot/sandweb/sandweb/bin In directory sc8-pr-cvs1:/tmp/cvs-serv3067/bin Modified Files: sandweb.cgi Log Message: * made vcs edit subroutine exit, so it doesn't print the page twice * made "watch" work, but it's a complex command and needs it's own menu. * disabled "watch", "watchers", "import" Index: sandweb.cgi =================================================================== RCS file: /cvsroot/sandweb/sandweb/bin/sandweb.cgi,v retrieving revision 1.344 retrieving revision 1.345 diff -U2 -r1.344 -r1.345 --- sandweb.cgi 2 Feb 2003 23:39:59 -0000 1.344 +++ sandweb.cgi 3 Feb 2003 20:56:00 -0000 1.345 @@ -2697,4 +2697,6 @@ MESSAGE => $message, ); + + exit; } else { my $message = "vcs $vcs_command on @filename"; @@ -2718,4 +2720,21 @@ MESSAGE => $message, ); + + exit; + } + } elsif ( $vcs_command eq 'watch' ) { + # this is where the Repository object is used + # can't give the leading / to the VCS + $location =~ s/\///; + + foreach my $file (@filename) { + %return = $repository->$vcs_command( + set => 1, + notify => 1, + file => "$file", + %params, + ); + push (@vcs_output, "$return{'output'}\n"); + push (@vcs_error, "$return{'error'}\n"); } } else { @@ -2753,4 +2772,5 @@ MESSAGE => $message, ); + exit 0; } |
From: Rob H. <for...@us...> - 2003-02-03 20:56:10
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb/Repository In directory sc8-pr-cvs1:/tmp/cvs-serv3067/lib/SandWeb/Repository Modified Files: cvs.pm Log Message: * made vcs edit subroutine exit, so it doesn't print the page twice * made "watch" work, but it's a complex command and needs it's own menu. * disabled "watch", "watchers", "import" Index: cvs.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Repository/cvs.pm,v retrieving revision 1.39 retrieving revision 1.40 diff -U2 -r1.39 -r1.40 --- cvs.pm 31 Jan 2003 06:46:11 -0000 1.39 +++ cvs.pm 3 Feb 2003 20:56:04 -0000 1.40 @@ -2425,6 +2425,6 @@ my @param = 'watch'; - if ($set) { push @param, " $set" }; - if ($notify) { push @param, " $notify" }; + if ($set) { push @param, " on" }; + if ($notify) { push @param, " add" }; if ($recurse) { push @param, " -R" }; |
From: Rob H. <for...@us...> - 2003-02-03 20:56:10
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb In directory sc8-pr-cvs1:/tmp/cvs-serv3067/lib/SandWeb Modified Files: Repository.pm Log Message: * made vcs edit subroutine exit, so it doesn't print the page twice * made "watch" work, but it's a complex command and needs it's own menu. * disabled "watch", "watchers", "import" Index: Repository.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Repository.pm,v retrieving revision 1.50 retrieving revision 1.51 diff -U2 -r1.50 -r1.51 --- Repository.pm 12 Jan 2003 05:13:47 -0000 1.50 +++ Repository.pm 3 Feb 2003 20:56:03 -0000 1.51 @@ -2538,5 +2538,4 @@ 'editors', 'history', - 'import', 'log', 'remove', @@ -2545,7 +2544,4 @@ 'unedit', 'update', - 'unedit', - 'watch', - 'watchers', ); } |
From: Rob H. <for...@us...> - 2003-02-02 23:59:26
|
Update of /cvsroot/sandweb/sandweb In directory sc8-pr-cvs1:/tmp/cvs-serv23097 Modified Files: README Log Message: updated README to make it match the reality of the BETA release Index: README =================================================================== RCS file: /cvsroot/sandweb/sandweb/README,v retrieving revision 1.9 retrieving revision 1.10 diff -U2 -r1.9 -r1.10 --- README 15 Aug 2002 08:17:05 -0000 1.9 +++ README 2 Feb 2003 23:59:23 -0000 1.10 @@ -11,6 +11,6 @@ SandWeb requires a user agent that supports and allows Javascript -and cookies. It has been tested with Netscape 6.2, Internet Explorer -5.0 and Mozilla 1.0.0 +and cookies. It has been tested with Netscape 7.0, Internet Explorer +5.0 and Mozilla 1.2. Please note that the common method for disabling "pop-up ads" in Mozilla, @@ -68,9 +68,6 @@ ------------- -SandWeb will prompt you for your full name and local work -directory. Your local work directory is where SandWeb will -attempt to send downloaded files to on your local workstation -( note that neither of these features are functional in the BETA release, -however the questions are still asked ). +SandWeb will prompt you for your full name and whether or not you +wish to confirm every file deletion. After submitting this information, you will be left at the Sandbox @@ -92,4 +89,12 @@ "local", "pserver" and "SSH" CVS repositories. +Please note that "pserver" is totally insecure with SandWeb's current +authentication method, since passwords need to be stored in ~/.cvspass +for this to work. Any user with a SandWeb account could therefore use +any other user's credentials. + +However, if you really want to use "pserver" ( maybe by giving +different users their own Apache instances ), this still works, but +you'll need to do the initial "cvs login" manually for now. ------------------------ @@ -136,3 +141,3 @@ the appropriate mailing list : -http://sourceforge.net/mail/?group_id=25671 \ No newline at end of file +http://sourceforge.net/mail/?group_id=25671 |
From: Rob H. <for...@us...> - 2003-02-02 23:40:05
|
Update of /cvsroot/sandweb/sandweb/bin In directory sc8-pr-cvs1:/tmp/cvs-serv16682/bin Modified Files: sandweb.cgi Log Message: it's now possible to do this : 1) delete existing checkout 2) immediately check out a module with the same name without it being deleted immediately because the URL bar still has "commit=Delete" on it when the popUp refreshes the main window. Index: sandweb.cgi =================================================================== RCS file: /cvsroot/sandweb/sandweb/bin/sandweb.cgi,v retrieving revision 1.343 retrieving revision 1.344 diff -U2 -r1.343 -r1.344 --- sandweb.cgi 22 Jan 2003 06:53:09 -0000 1.343 +++ sandweb.cgi 2 Feb 2003 23:39:59 -0000 1.344 @@ -2891,5 +2891,5 @@ $log->debug("module list for repo '$repo_name': " . join('-', $user->get_module_list(repo => $repo_name))); } - sandbox_menu( ck_auth => $ck_auth ); + print $cgi->redirect("$progname?action=sandbox"); exit(0); } |
From: Rob H. <for...@us...> - 2003-02-01 07:20:59
|
Update of /cvsroot/sandweb/sandweb/debian In directory sc8-pr-cvs1:/tmp/cvs-serv20475/debian Modified Files: control Log Message: working on debian package correctness ( using lintian ) Index: control =================================================================== RCS file: /cvsroot/sandweb/sandweb/debian/control,v retrieving revision 1.2 retrieving revision 1.3 diff -U2 -r1.2 -r1.3 --- control 1 Feb 2003 02:54:44 -0000 1.2 +++ control 1 Feb 2003 07:20:56 -0000 1.3 @@ -8,6 +8,5 @@ Package: sandweb Architecture: all -Depends: perl (>= 5.6), libxml-simple-perl, cvs, expect, file, apache, - libhtml-template-perl, libdigest-md5-perl +Depends: perl (>= 5.6), libxml-simple-perl, cvs, expect, file, apache, libhtml-template-perl, libdigest-md5-perl Description: Web-based CVS ( and more ) client SandWeb is a Web-based client for CVS and other version control systems. |
From: Rob H. <for...@us...> - 2003-02-01 03:42:46
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb In directory sc8-pr-cvs1:/tmp/cvs-serv3494/lib/SandWeb Modified Files: Shell.pm Log Message: better fix for avoiding SSH output but still getting CVS output. Index: Shell.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Shell.pm,v retrieving revision 1.30 retrieving revision 1.31 diff -U2 -r1.30 -r1.31 --- Shell.pm 31 Jan 2003 06:49:32 -0000 1.30 +++ Shell.pm 1 Feb 2003 03:42:43 -0000 1.31 @@ -373,6 +373,8 @@ $raw_output =~ s/^M/\n/g; my @lined_output = split(/\n/, $raw_output); - #shift @lined_output; shift @lined_output; + if ( "@lined_output" =~ "'s password:" ) { + shift @lined_output; + } if ( "@lined_output" =~ "^RSA key fingerprint is" ) { shift @lined_output; |
From: Rob H. <for...@us...> - 2003-02-01 02:54:48
|
Update of /cvsroot/sandweb/sandweb/debian In directory sc8-pr-cvs1:/tmp/cvs-serv22919/debian Modified Files: control Log Message: changed maintainer name/email to "SandWeb Developers" <san...@li...> Index: control =================================================================== RCS file: /cvsroot/sandweb/sandweb/debian/control,v retrieving revision 1.1 retrieving revision 1.2 diff -U2 -r1.1 -r1.2 --- control 12 Jan 2003 11:15:01 -0000 1.1 +++ control 1 Feb 2003 02:54:44 -0000 1.2 @@ -2,5 +2,5 @@ Section: net Priority: optional -Maintainer: Robert Helmer <ro...@na...>, Nick Jennings <ni...@na...> +Maintainer: "SandWeb Developers" <san...@li...> Standards-Version: 3.5.8 Build-Depends: perl |
From: Rob H. <for...@us...> - 2003-01-31 06:49:34
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb In directory sc8-pr-cvs1:/tmp/cvs-serv14865/lib/SandWeb Modified Files: Shell.pm Log Message: I was shifting one too many lines, we were missing some errors! :o ( like when you try to commit a file you didn't see why it failed if it hadn't been added ) Index: Shell.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Shell.pm,v retrieving revision 1.29 retrieving revision 1.30 diff -U2 -r1.29 -r1.30 --- Shell.pm 31 Jan 2003 06:46:11 -0000 1.29 +++ Shell.pm 31 Jan 2003 06:49:32 -0000 1.30 @@ -373,5 +373,5 @@ $raw_output =~ s/^M/\n/g; my @lined_output = split(/\n/, $raw_output); - shift @lined_output; + #shift @lined_output; shift @lined_output; if ( "@lined_output" =~ "^RSA key fingerprint is" ) { |
From: Rob H. <for...@us...> - 2003-01-31 06:46:14
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb In directory sc8-pr-cvs1:/tmp/cvs-serv13990/lib/SandWeb Modified Files: Shell.pm Log Message: oh, duh, this is why spaces in commit msgs work again, I fixed it on bart the other day :) also, Shell now doesn't display the "hostkey accepted" message for DSA as well as RSA keys. Index: Shell.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Shell.pm,v retrieving revision 1.28 retrieving revision 1.29 diff -U2 -r1.28 -r1.29 --- Shell.pm 26 Jan 2003 05:46:19 -0000 1.28 +++ Shell.pm 31 Jan 2003 06:46:11 -0000 1.29 @@ -379,4 +379,7 @@ shift @lined_output; shift @lined_output; + } elsif ( "@lined_output" =~ "^DSA key fingerprint is" ) { + shift @lined_output; + shift @lined_output; shift @lined_output; } |
From: Rob H. <for...@us...> - 2003-01-31 06:46:14
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb/Repository In directory sc8-pr-cvs1:/tmp/cvs-serv13990/lib/SandWeb/Repository Modified Files: cvs.pm Log Message: oh, duh, this is why spaces in commit msgs work again, I fixed it on bart the other day :) also, Shell now doesn't display the "hostkey accepted" message for DSA as well as RSA keys. Index: cvs.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Repository/cvs.pm,v retrieving revision 1.38 retrieving revision 1.39 diff -U2 -r1.38 -r1.39 --- cvs.pm 12 Jan 2003 05:30:12 -0000 1.38 +++ cvs.pm 31 Jan 2003 06:46:11 -0000 1.39 @@ -696,5 +696,5 @@ ); - push @param, " -m \"$message\""; + push @param, " -m \'$message\'"; if ($log) { $log->debug("Performing commit operation"); |
From: Rob H. <for...@us...> - 2003-01-26 05:46:21
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb In directory sc8-pr-cvs1:/tmp/cvs-serv25209/lib/SandWeb Modified Files: Shell.pm Log Message: * commit wasn't passing the password through in a POST, so, if you weren't saving the repo password, then it would fail with "permission denied" :( now it's fixed though :) * we now get decent error reporting from sandweb-expect, hurrah! Index: Shell.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Shell.pm,v retrieving revision 1.27 retrieving revision 1.28 diff -U2 -r1.27 -r1.28 --- Shell.pm 23 Jan 2003 08:16:50 -0000 1.27 +++ Shell.pm 26 Jan 2003 05:46:19 -0000 1.28 @@ -290,5 +290,5 @@ - $error = $?; + $error = $?/256; $raw_output =~ s/ /\n/g; my @lined_output = split(/\n/, $raw_output); @@ -319,5 +319,5 @@ } - $error = $?; + $error = $?/256; $raw_output =~ s/^M/\n/g; my @lined_output = split(/\n/, $raw_output); @@ -335,4 +335,10 @@ ); + # is password empty? make it null instead + + unless ($vcs_password) { + $vcs_password = ' '; + } + $file->file_write( contents => "$vcs_password", @@ -346,4 +352,5 @@ my $error_output; $raw_output = `$sandweb_expect vcs $users_dir/passwd "$command" 2>&1`; + $error = $?/256; $file->delete(); alarm 0; @@ -363,5 +370,4 @@ } - $error = $?; $raw_output =~ s/^M/\n/g; @@ -400,5 +406,5 @@ } - $error = $?; + $error = $?/256; } |
From: Rob H. <for...@us...> - 2003-01-26 05:46:21
|
Update of /cvsroot/sandweb/sandweb/templates In directory sc8-pr-cvs1:/tmp/cvs-serv25209/templates Modified Files: commit.html Log Message: * commit wasn't passing the password through in a POST, so, if you weren't saving the repo password, then it would fail with "permission denied" :( now it's fixed though :) * we now get decent error reporting from sandweb-expect, hurrah! Index: commit.html =================================================================== RCS file: /cvsroot/sandweb/sandweb/templates/commit.html,v retrieving revision 1.20 retrieving revision 1.21 diff -U2 -r1.20 -r1.21 --- commit.html 22 Jan 2003 06:55:14 -0000 1.20 +++ commit.html 26 Jan 2003 05:46:19 -0000 1.21 @@ -3,5 +3,5 @@ <td width="center"> Please enter a commit message for <TMPL_VAR NAME=LOCATION>/<TMPL_VAR NAME=FILENAME> : - <form name="commit"> + <form name="commit" type="POST"> <!-- <TMPL_VAR NAME=PROGNAME> --> <input type="hidden" name="action" value="vcs"> @@ -11,4 +11,5 @@ <input type="hidden" name="module_name" value="<TMPL_VAR NAME=MODULE_NAME>"> <input type="hidden" name="repo_name" value="<TMPL_VAR NAME=REPO_NAME>"> + <input type="hidden" name="repo_password" value="<TMPL_VAR NAME=REPO_PASSWORD>"> <input name="Submit" value="1" type="hidden"> <input type="text" name="message"> |
From: Rob H. <for...@us...> - 2003-01-26 05:42:18
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb In directory sc8-pr-cvs1:/tmp/cvs-serv24133/lib/SandWeb Modified Files: Log.pm Log Message: oops, misplaced =cut for POD caused code brrreakage! Index: Log.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Log.pm,v retrieving revision 1.17 retrieving revision 1.18 diff -U2 -r1.17 -r1.18 --- Log.pm 23 Jan 2003 17:36:34 -0000 1.17 +++ Log.pm 26 Jan 2003 05:42:15 -0000 1.18 @@ -288,4 +288,6 @@ -------------------------------------------------------------------------------- +=cut + sub get_debug_msgs { my $self = shift; |
From: Rob H. <for...@us...> - 2003-01-23 17:36:38
|
Update of /cvsroot/sandweb/sandweb/lib/SandWeb In directory sc8-pr-cvs1:/tmp/cvs-serv29583/lib/SandWeb Modified Files: Log.pm Log Message: added API doc for "get_debug_msgs" method Index: Log.pm =================================================================== RCS file: /cvsroot/sandweb/sandweb/lib/SandWeb/Log.pm,v retrieving revision 1.16 retrieving revision 1.17 diff -U2 -r1.16 -r1.17 --- Log.pm 22 Jan 2003 06:49:36 -0000 1.16 +++ Log.pm 23 Jan 2003 17:36:34 -0000 1.17 @@ -258,4 +258,34 @@ } +=head1 + +METHOD + + get_debug_msgs + +SYNOPSIS + + $log->get_debug_msgs(); + +DESCRIPTION + + Returns all debug messages. + +PARAMETERS + + None. + +RETURN CODES + + 1 = The operation completed successfully. + + 0 = This means that the method got an error proccessing your request. + Perhaps an invalid parameter? + + -1 = This return value means that there was not sufficient permision to + read the files specified, or they did not exist. + +-------------------------------------------------------------------------------- + sub get_debug_msgs { my $self = shift; |
From: Rob H. <for...@us...> - 2003-01-23 08:16:54
|
Update of /cvsroot/sandweb/sandweb/bin In directory sc8-pr-cvs1:/tmp/cvs-serv16366/bin Modified Files: sandweb-expect Log Message: * can now handle accepting hostkey * reports login errors correctly caveat - it times out after 10 seconds for the initial password attempt, and expects the hostkey question instead. there _must_ be a way to do "expect this or that" in expect, instead of the "expect this until timeout, expect this until timeout". I'll keep looking. Index: sandweb-expect =================================================================== RCS file: /cvsroot/sandweb/sandweb/bin/sandweb-expect,v retrieving revision 1.10 retrieving revision 1.11 diff -U2 -r1.10 -r1.11 --- sandweb-expect 7 Nov 2002 08:01:10 -0000 1.10 +++ sandweb-expect 23 Jan 2003 08:16:49 -0000 1.11 @@ -18,24 +18,24 @@ spawn /bin/sh -c $vcs_command + set timeout 10 expect { "password:" { send "$vcs_password\r" } + "denied" { exit 2 } + eof { exit 0 } + } expect { + "Are you sure" { send "yes\r" } + "password:" { send "$vcs_password\r" } + "denied" { exit 2 } + eof { exit 0 } + } - "Are you sure" { - send "y" - } - - "denied" { - send "Invalid VCS username/password\r" - exit 2 - } - - eof { - # success - exit 0 - } + expect { + "password:" { send "$vcs_password\r" } + "denied" { exit 2 } + eof { exit 0 } } |