Re: [dspam-users] WebUI problems...

Some (maybe all) of your problems are just due to the bugs present in
the WebUI cgi's. Many of us have written patches to fix these
problems, and in fact an excellent one was posted by Stefan Huelswitt
here on the dev list yesterday. I have found it solves many of the
issues you mention and also adds some nice new functionality. I've
attached his patch to this message.. can we please get this patch or
something like it committed? I'd be glad to help in any way needed.

-Aaron

Here's Stefan's original message:

On 3/28/06, Brent StephHi,

attached is a patch (against CVS) with several enhancements and
fixes of the webui:

- Using HTTP redirect to redirect the browser back to the original template
 after the user has executed a link. Doesn't allow the browser to show the URL
 location with the embedded command e.g. retrain=spam. Protects the user from
 accidental re-execute of the command by reloading the page.
- Changed DisplayHistory to scan the entire logfile first and only then decide
 which information has to be displayed based on history_page. Avoids wrong
 display due to incomplete information available.
- Discard 'resent' messages in history display.
- Quote single-quote ' (mostly from subject) in javascript command for fragment
 display. Prevents execution of the command.
- Added links to previous/next history page.
- Added 'history_page=1' to all templates for consistency.
- Apply MAX_COL_LEN to history display as well.
- Added DATE_FORMAT to configure.pl to allow customized date format in history
 and quarantine (using strftime).
- Added OPTMODE to configure.pl to customize preferences tab for OptIn, OptOut
 or no selectable option.
- Touching a mailbox timestamp file every time the user displays the quarantine.
 This file can be used in a report_quarantine script.
- Removed 'sortby=Rating' from all templates as it renders SORT_DEFAULT useless.
- In quarantine, keep selected sort method after processing mails.
- In GetPrefs, read default prefs first and overlay them with user prefs.

I would appreciate if the patch could be incorporated.

The author or authors of this submission hereby release any and
all copyright interest in this code, documentation, or other
materials included to the DSPAM project and its primary
governors. We intend this relinquishment of copyright interest
in perpetuity of all present and future rights to said
submission under copyright law.

Regards.ens <brent.stephens@brij.net> wrote:
> I am having a few frustrating issues with the WebUI regarding Retraining
> and setting preferences. First I'll shed some light on my setup.
>
> I am using DSPAM compiled from CVS with the ClamAV patch on 3/25/2006.
>
> DSPAM is being called by Postfix as a content filter. This is working
> fine.
>
> Postfix is essentially only acting as a relay to and from our Exchange
> server. Postfix only delivers locally to one user.
>
> The relayed users that will be actually using DSPAM functionality have
> been added to the dspam_virtual_uids (MYSQL 4.1 w/o bug) along with their
> aliases.
>
> The aliases have their localStore set to share the primary username as
> its data directory.
>
> The WebUI is running over https using its own customized install of
> Apache 2.2.0.
>
> Ok, I hope that is enough information. One of the things happening
> is...some messages for some users are showing erratic behavior. Messages
> are refusing to retrain. In fact, it seems as if this is sporadically
> happening to ALL of the users over a small amount of time. With ONE user
> out of 35, I have actually received a blank error message from the DSPAM
> interface when retraining.
>
> Another behavior is that some messages, when retrained, are losing their
> data reported in the FROM and SUBJECT on the History page. In both of the
> previous cases there are no errors reported in the Apache logs.
>
> The Preferences issues I am having are setting global preferences through
> the WebUI. Under the Administration tab, it says "You can also edit DSPAM's
> default preferences by leaving the input field empty." This does not,
> however, work.
>
>
> --
> Alan Brent Stephens
> brij Help Desk Administrator
>