[Prelude Hybrid IDS] #262: Problem adding users with Prewikka 0.9.12.1
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#262: Problem adding users with Prewikka 0.9.12.1 ------------------------------+--------------------------------------------- Reporter: [email protected] | Owner: yoann Type: defect | Status: new Priority: normal | Milestone: Component: prewikka | Version: 0.9 Severity: major | Keywords: prewikka user create None username login ------------------------------+--------------------------------------------- When trying to add new users with Prewikka 0.9.12.1 the login is changed to this (where <username> is the user name entered): ['None', '<username>'] I don't know Python so I couldn't properly fix it, but I traced the problem to this: views/usermanagement.py and templates/UserSettings.py use a hidden "login" parameter to keep track of the user currently being edited. When a new user is added, the same template is used and the HTML code sent to the browser contains those two tags: <input type="hidden" name="login" value="None"/> <input type="text" name="login"/> On the POST request the browser sends back this string (with two login= parameters): view=user_settings_add&login=None&login=<username>&language=en&permissions=<some_perms>&password_new=<password>&password_new_confirmation=<password> And some Python magic make the user appear as described above. -- Ticket URL: <https://trac.prelude-ids.org/ticket/262> Prelude Hybrid IDS <http://www.prelude-ids.org> The Prelude Hybrid Intrusion Detection System suite _______________________________________________ Prelude-devel site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-devel