NetTalk Central

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - GordonF

Pages: [1] 2
1
Web Server - Ask For Help / The URL for the Fetch command was blank
« on: April 08, 2024, 06:49:39 AM »
Hi, I'm hoping someone can help.

I've suddenly ran into a certificate generation problem for any site renewing their certificate for web server. I get the the response "The URL for the Fetch command was blank", a section of the log is below.

I'm using NetTalk 12.17, I know I need to update but I've held off as I have some mods in the templates, if it's a known problem that requires an update then I'll move to NetTalk 14 but I would appreciate any help to get it working in the meantime.


[ 4/08/24-15:46:00]  The URL for the Fetch command was blank
[ 4/08/24-15:46:00]  Requesting Certificate For staging.edgeanywhere.co.uk
[ 4/08/24-15:46:00]  Finalized. Will now fetch certificate
[ 4/08/24-15:46:00]  Finalize Request staging.edgeanywhere.co.uk
[ 4/08/24-15:45:59]  Hostname resolved to: 45.8.225.229
[ 4/08/24-15:45:59]  Challenge was valid. Will now finalize
[ 4/08/24-15:45:59]  Status: "valid"
[ 4/08/24-15:45:59]  Get Authorize staging.edgeanywhere.co.uk
[ 4/08/24-15:45:59]  Checking Status
[ 4/08/24-15:45:52]  Setting Folders for Domain [staging.edgeanywhere.co.uk]
[ 4/08/24-15:45:49]  Status: "pending"
[ 4/08/24-15:45:48]  Get Authorize staging.edgeanywhere.co.uk
[ 4/08/24-15:45:48]  Checking Status
[ 4/08/24-15:45:43]  Status: "pending"
[ 4/08/24-15:45:43]  Setting Folders for Domain [staging.edgeanywhere.co.uk]
[ 4/08/24-15:45:43]  Setting Folders for Domain [staging.edgeanywhere.co.uk]
[ 4/08/24-15:45:43]  Setting Folders for Domain [staging.edgeanywhere.co.uk]
[ 4/08/24-15:45:43]  Setting Folders for Domain [staging.edgeanywhere.co.uk]
[ 4/08/24-15:45:43]  Get Authorize staging.edgeanywhere.co.uk
[ 4/08/24-15:45:42]  Checking Status
[ 4/08/24-15:45:42]  Notify Server Challenge is Ready
[ 4/08/24-15:45:42]  LE Server will now fetch http://staging.edgeanywhere.co.uk:80/.well-known/acme-challenge/lB-U9m6_enz102MB6pIzlRfHONa9CAgvYnm2Z0opi6s
[ 4/08/24-15:45:42]  Challenge Token Saved C:\Dentsys\Server\web\.well-known\acme-challenge\lB-U9m6_enz102MB6pIzlRfHONa9CAgvYnm2Z0opi6s
[ 4/08/24-15:45:41]  Get Authorize staging.edgeanywhere.co.uk
[ 4/08/24-15:45:41]  Authorize Request staging.edgeanywhere.co.uk
[ 4/08/24-15:45:40]  Registering Account Dentsys at  https://acme-staging-v02.api.letsencrypt.org/acme/new-acct
[ 4/08/24-15:45:38]  Time to update the certificate staging.edgeanywhere.co.uk
[ 4/08/24-15:45:38]  C:\Dentsys\Server\certificates\staging.edgeanywhere.co.uk.crt does not exist
[ 4/08/24-15:45:38]  Setting Folders for Domain [staging.edgeanywhere.co.uk]
[ 4/08/24-15:45:38]  Created C:\Dentsys\Server\certificates\staging.edgeanywhere.co.uk.csr.der
[ 4/08/24-15:45:38]  Created C:\Dentsys\Server\certificates\staging.edgeanywhere.co.uk.csr
[ 4/08/24-15:45:38]  Created C:\Dentsys\Server\certificates\staging.edgeanywhere.co.uk.key
[ 4/08/24-15:45:29]  Setting Folders for Domain [staging.edgeanywhere.co.uk]
[ 4/08/24-15:45:29]  Created C:\Dentsys\Server\certificates\Dentsys-LE.key
[ 4/08/24-15:45:27]  Created C:\Dentsys\Server\certificates\Dentsys-CA.crt
[ 4/08/24-15:45:27]  Created C:\Dentsys\Server\certificates\Dentsys-CA.key

2
Hi,

I have an unusual issue and it may just be that I'm doing something incorrectly.

I have a simple memory form called from a browse (no action), it has a text field, plus a save and cancel button. It all works fine until I set the text field to required, if after that I click save with an empty text field I get the required warning as expected, however if I then type a value into the text field and click the save (either with or without tabbing off the text field) the CompleteForm code runs but the form doesn't return to the caller it redraws itself with the text field being shown without the required required colouration, the second click on save again runs the CompleteForm code and returns to the browse. The result is my CompleteForm code which inserts a record into an unrelated table runs twice, what am I doing incorrectly.

Any advice would be much appreciated.


A quick update, the p_web.RequestReferer value gets set to the actual memory form name after the first failed required check, the solution was to store the initial p_web.RequestReferer value and set this as the save return url.


3
Web Server - Ask For Help / OAuth and emails
« on: September 12, 2022, 06:04:21 AM »
Hi,

I've finally got round to implementing OAuth for some of our customers whose email accounts will very soon require it.

I've looked at the OAuth example particularly the Google example (I'll need Microsoft too). I understand the login procedure to get a Token and then using that token in the email Authorization string. The element I'm not at all clear on is the use of the token without forcing a login, I get setting OAuthParms.pForce = false and using the stored token doesn't call the login screen, but given the token I receive from Google has a life of one day does this mean I need to request a login everyday or does the rRefreshToken in the parameters group somehow play a part in auto renewing the Token. I'm assuming I need to initialise the OAuth class before sending or receiving emails to ensure I have a valid token, do I only need do this when the token has passed it's expiry date/time or every time?

I don't seems to get a refreshtoken, the value stored in the ini file is always blank.

I've read the documentation but I'm still struggling to understand the basic concept for renewing the token without requiring a user login every time, any advice would be very much appreciated, please assume I know nothing about the process.

Kind Regards
Gordon

4
Web Server - Ask For Help / ERROR: -30 Unable to Close connection
« on: January 27, 2022, 04:23:02 AM »
My webserver logs the following error on customer's servers, sometimes quite frequently although it carries on running:

ERROR: -30 Unable to Close connection An error occurred while trying to access a memory queue (read or write error). The queue could be full or there is not enough memory

I really don't understand what it is trying to tell me, does anyone have any ideas or know if I should be concerned?

Best Regards
Gordon

5
Web Server - Ask For Help / Initial position in queue loaded drop field
« on: January 10, 2022, 04:34:38 AM »
Is there a way to set the initial position in a queue loaded drop field, for example:

The drop is a simple numeric with a range of 1-100. When the user clicks to get the drop list it always opens starting at 1 rather than positioning at the current field value as a starting point which could be any number in that range. It may seem a minor thing but it's causing some irritation with customers as the new value may be close to the current value but they may have to scroll down quite a bit to get in the correct range.

Any help greatly appreciated, the form in question is a memory form.

Thanks Gordon

6
Web Server - Ask For Help / Goto First Page in NetWebBrowse
« on: November 18, 2021, 04:59:09 AM »
I'm probably missing something obvious but can anyone tell me how to force a browse list to goto the first page. Basically I have a popup update form on a browse and after an insert I want to go to the first page of the calling browse not the last, any ideas?

Gordon



7
Web Server - Ask For Help / html textarea in a browse
« on: November 05, 2021, 03:22:25 AM »
Is there a way to have an html textarea in a browse?

I realise that strings can become multi-line if long enough but only by word wrapping, line breaks are not respected. I really need a method to correctly display text containing line breaks in a browse row, ideally limited to a number of lines with a scroll bar, no EIP ability is required for my needs so readonly is fine.

Gordon

8
Web Server - Ask For Help / NetWebYear Planner Alignment
« on: October 14, 2021, 03:34:04 AM »
Can anyone help with correcting the vertical alignment of the planner entries relative to the time cells on the left.

I've attached an image from the hotdates example (No. 12), I've forced the event to display at the very left just to highlight the issue.

As you can see the event starts and ends lower than the corresponding time row boundary, also the click to insert areas are similarly offset, meaning if a user clicks in the top few pixels of a time row they actually get a record start time for the time cell before. The effect changes a little with the theme used but it is always there, using the base theme (which I do in my app) the date column headers are partially covered by an event in the first time slot.

I've also attached an image with one of the date/time click rows (08:35) bordered in blue to clarify the issue.

Any help would be greatly appreciated as I have used the planner to create a very useful appointment book and this is the final refinement I need.

Gordon

9
Web Server - Ask For Help / Tree control that supports multi-line text
« on: October 13, 2021, 02:11:46 AM »
Hi,

Sorry I seem to be asking questions very frequently, but in my defence I only started using WebServer early this year so I've a lot to learn.

I would like to be able to produce a view in my web app similar to my desktop app (image attached), this is to allow for display, insertion and revision of clinical notes, as well as showing revision data in a lower level than the current note version.

My desktop app has a tree structure that allows for multi line text fields, that is text with line breaks not just text wrapping although that too. On clicking I can detect the node clicked and respond accordingly.

I have started looking at the Tree control in WebServer and it supports text wrapping but I can't make it display line breaks for multi line text, although that may well be my lack of knowledge. The second problem I ran into is determining which node was clicked, I can detect the user clicked in the ValidateValue routine and also in validate::atree, but I have no idea how to determine the specific node that was clicked.

It seems to be so close to what I need so any help would be greatly appreciated, even if it is use a different specific control.

Best Regards
Gordon

10
Web Server - Ask For Help / NetWebYear or other scheduler
« on: October 01, 2021, 03:18:42 AM »
Hi,

I've tried using NetWebYear to create a basic appointment book and in truth it provides all I must have apart from a couple of features:

1. The ability to change the background colour of specific time slots for a given date to make non working times such as lunch obvious, I know I could put an appointment in but it's no ideal.

2. Ideally select a colour for individual events.

Are either of these possible.

Failing that I've looked at FullCalendar but that will be a steep learning curve for me as I've not used a jquery plugin before and I don't know if its even possible.

I know I ask a lot of questions but I do appreciate the help I receive.

Gordon

11
Web Server - Ask For Help / Security analysis vulnerability reported
« on: September 30, 2021, 03:12:58 AM »
Hi,

One of our customers has run a security analysis on their system and has reported that there is a significant vulnerability with regard to our Nettalk WebServer application. The analysis was performed by Barclays Bank for their ongoing PCIDSS Compliance of card payment machines on the LAN. It appears to me in my limited knowledge that the Session ID is what they are highlighting, but beyond that I'm lost.

Does anyone have any suggestions, comments or advice about what we can do about this or what we can reply with? I would be most grateful if anyone has anything to share.

I have pasted part of their email below:


"

THREAT:
The scanner found a Web application on the target that uses cookies. The application seems to use cookies (likely, session IDs) in an insecure way. Specifically, the
scanner created a web session with the target using a session ID specified by the scanner itself. The target application simply started a new session with this specified
session ID. This issue is generally called "session-fixation" and is vulnerable to session-hijacking attacks.
One scenario where this could be used to hijack an unsuspecting user's Web session is as follows. Assuming an online store, www.examplestore.com, has this security
issue. If an attacker uses social engineering techniques to make a target user click on a link (in an email or on a malicious Web site) like http://www.examplestore.com/?
PHPSESSID=12345, where PHPSESSID is the cookie used for identifying the session, the store will start a new session for the unsuspecting user with the session ID
12345. Then, since the attacker knows the session ID already, the attacker can simply hijack the session moments after the user has visited the store.

IMPACT:
By exploiting this vulnerability, an attacker could use the hijacked session for information gathering, invasion of privacy, property theft, or credit-card theft.
For more information about the way session-fixation attacks can be performed and the possible consequences of such attacks, read this paper.

SOLUTION:
This is a common issue web-developers come across, and many application-specific solutions exist.
The PHP package itself provides a "php.ini" based global configuration option called "session.use_only_cookies" (introduced in PHP Version 4.3.0). This is disabled by
default for backward compatibility. When enabled, this allows PHP session IDs to be set only via HTTP cookies. This makes GET/POST based hijack attacks possible
only when there is significant activity by an unsuspecting user.
For more information, read the Sessions and Security description provided on PHP's Web site.

For solutions in other web packages, check the relevant documentation.

RESULT:
GET /?SESSIONID=0123456789abcdef0123456789abcdef HTTP/1.0
Host: 77-44-120-131.xdsl.murphx.net
HTTP/1.1 200 OK
Date: Thu, 16 Sep 2021 15:53:57 GMT
Expires: Wed, 16 Sep 2020 15:53:57 GMT
Content-Length: 2577
Content-Type: text/html
Cache-Control: no-store, no-cache, must-revalidate, private,post-check=0, pre-check=0, max-age=0
Pragma: no-cache
Set-Cookie: SESSIONID=0123456789abcdef0123456789abcdef; path=/; secure; HttpOnly; SameSite=Strict
Connection: close
Access-Control-Allow-Origin: *
X-Frame-Options: sameorigin
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
<!DOCTYPE html><html class=" nt-html no-js">
<head>
<title>EDGE Anywhere</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="viewport" content="initial-scale=1">
<link href="/themes/base/theme.css?c=12.17" rel="stylesheet" />
<link href="/redactor/redactor.min.css?c=12.17" rel="stylesheet" />
<script src="/scripts/all.js?c=12.17" type="text/javascript"></script>
<script src="/redactor/redactor.min.js?c=12.17" type="text/javascript"></script>
</head>
<body class=" PageBody">
<div id="body_div" class=" PageBodyDiv">
...... rest of page

"

12
Web Server - Ask For Help / Div Grid on a form
« on: September 28, 2021, 04:16:25 AM »
Am I correct in thinking Div Grid is intended to allow 2 dimensional field placement rather than 1 dimensional, in other words like Flex Grid?

If so is there an example that presents a form in 2 dimensions with correct vertical alignment, with perhaps 3 or 4 columns. I have tried and all I seem to get are 2 columns that don't respond correctly on resize. I fully anticipate that I am not using the feature correctly, however the only options I can find are for HTML Method (I set it to Div Grid) and the individual field start/span for row and column, I've also tried various span and last on row/line settings. Oddly I don't really see any difference between Div FlexBox and Div Grid mode, could it relate to me using 'base' as my theme and the CSS it contains?

I would really like to have a form with several fields on a row for several rows all vertically aligned into columns (perhaps 3), I know this may sound like a browse but that isn't what I require, it is just a section of a larger form. Table mode will let me do this but it is non responsive to browse width.

As ever any help would be greatly appreciated.

Gordon

13
Web Server - Ask For Help / Time entry format problem
« on: September 27, 2021, 04:24:54 AM »
I have an issue where seemingly similar time entry fields on a form are formated hh:mm or sometimes hh:mm:ss even though I've selected hh:mm from the picture dropdown, on examining the generated code it produces:

packet.append(p_web.CreateInput('time','TRPH:TRIContactTime',p_web.GetSessionValue('TRPH:TRIContactTime'),loc:fieldclass,loc:readonly,clip(loc:extra) & ' ' & clip(loc:autocomplete),'@T06B',loc:javascript,p_web.PicLength('@t01'),'Triage Contact Time','TRPH:TRIContactTime',,'imb',,,,'UpdateTriage')  & p_web.CRLF) !a

As you can see it has a picture of @T06B, I checked NetWeb.tpw and the @T06B is hardcoded into the template as below

%gPacket.append(p_web.CreateInput('time','%FormField',p_web.Get%ValueScope(%DataField),loc:fieldclass,loc:readonly,clip(loc:extra) & ' ' & clip(loc:autocomplete),'@T06B',loc:javascript,%mltemp,%FormFieldTooltip,'%FormId',%FormFieldPlaceHolder,%datado,%vNumLow,%vNumHigh,%vNumStep,'%procedure')  & p_web.CRLF) !a

Should it not be using %FormFieldPictureTime as in the template code below, I changed the template and the fields now work as expected.

%gPacket.append(p_web.CreateInput('time','%FormField',p_web.Get%ValueScope(%DataField),loc:fieldclass,loc:readonly,clip(loc:extra) & ' ' & clip(loc:autocomplete),'%FormFieldPictureTime',loc:javascript,%mltemp,%FormFieldTooltip,'%FormId',%FormFieldPlaceHolder,%datado,%vNumLow,%vNumHigh,%vNumStep,'%procedure')  & p_web.CRLF) !a

Am I missing something and so shouldn't change the template?

NT12.17 I'll be moving to 12.26 in the next couple of days.

Gordon


14
Web Server - Ask For Help / The Tree field type on a form?
« on: September 23, 2021, 01:06:14 AM »
I'm intrigued by the Tree field type available on a form, am I correct in assuming this will allow a tree style browse structure to be built into a form?

If so is there an example that uses it or some documentation, if my assumption is incorrect is any form of tree control available in WebServer?

Gordon

15
Web Server - Ask For Help / Global setting of DatePicker Options
« on: September 14, 2021, 07:18:55 AM »
Is there a way to set DatePicker options globally so the default behaviour can be configured, for instance allowing year selection and a default year range, I can do this locally on each date field by setting the options but it would be nicer in my case to set defaults at a higher level and then override on the few occasions it is required.

Gordon


Pages: [1] 2