Recherche avancée

Sur d’autres sites (11307)

• Anomalie #3371 : faille sécurité ? balise meta+refresh dans un champ d’article

  5 janvier 2015, par Fabien Abbadie

  Fil Up a écrit :

  Pour moi le problème de sécu vient du piratage qui a eu lieu, pas de ce que le pirate a fait une fois dans la place... Essentiellement il est passé admin, et les admins gardent le droit de faire des choses intéressantes dans leur site.

  Oui mais non : j’ai testé sur une 3.0.17 à jour, pas piraté, et a priori, n’importe quel rédacteur peut faire ça.
  J’ai même testé sur forum.spip.net et ça a l’air de le faire aussi fait : mettez en titre, et voyons si les utilisateurs sont contents quand ils sont renvoyés vers une page piégé à chaque fois que l’article est listé.

  Si vous pouvez, essayez de voir cet article, proof of concept : http://forum.spip.net/ecrire/?exec=article&id_article=3140

• Anomalie #3615 (Fermé) : Evitons les redirections

  8 décembre 2015, par Franck Dalot

  Bonjour
  spip 3.1 [22634]

  Il reste encore dans le core des url de type .org au lieu de .net
  Je croyais que cela avait été fait, mais il semble que non :-(
  Exemple :
  Faudrait faire une transformation des url du type :
  http://core.spip.org/
  en :
  https://core.spip.net/

  http://forum.spip.org/
  en :
  http://forum.spip.net/

  http://demo.spip.org/
  en :
  http://demo.spip.net/

  Pendant que j’y suis, il s’agit de sites de la galaxie ou pas ?
  http://math.spip.org/tex.php
  https://core.spip.net/projects/spip/repository/entry/spip/ecrire/inc_version.php#L234

  http://example.org/squelettes/bg.png
  http://zone.spip.org/trac/spip-zone/browser/_core_/plugins/compresseur/tests/css/expected_url_abs.css
  Car ils ne sont pas en .net

  Franck

• FFServer streaming H.264 from Logitech C920

  23 octobre 2014, par Ricardo Frederico Leote Mota

  I’m having some trouble trying to implement a web live stream from my Logitech C920 webcam w/ H.264 encoding using ffmpeg/ffserver.

  Here is the configuration file I’m using for the ffserver :

  # Port on which the server is listening. You must select a different
  
  # port from your standard HTTP web server if it is running on the same
  
  # computer.
  
  Port 8090
  
  
  
  # Address on which the server is bound. Only useful if you have
  
  # several network interfaces.
  
  BindAddress 0.0.0.0
  
  
  
  # Number of simultaneous HTTP connections that can be handled. It has
  
  # to be defined *before* the MaxClients parameter, since it defines the
  
  # MaxClients maximum limit.
  
  MaxHTTPConnections 2000
  
  
  
  # Number of simultaneous requests that can be handled. Since FFServer
  
  # is very fast, it is more likely that you will want to leave this high
  
  # and use MaxBandwidth, below.
  
  MaxClients 1000
  
  
  
  # This the maximum amount of kbit/sec that you are prepared to
  
  # consume when streaming to clients.
  
  MaxBandwidth 1000
  
  
  
  # Access log file (uses standard Apache log file format)
  
  # '-' is the standard output.
  
  CustomLog -
  
  
  
  ##################################################################
  
  # Definition of the live feeds. Each live feed contains one video
  
  # and/or audio sequence coming from an ffmpeg encoder or another
  
  # ffserver. This sequence may be encoded simultaneously with several
  
  # codecs at several resolutions.
  
  
  
  <feed>
  
  
  
  # You must use 'ffmpeg' to send a live feed to ffserver. In this
  
  # example, you can type:
  
  #
  
  
  
  File /tmp/feed.ffm
  
  FileMaxSize 100M
  
  
  
  # You could specify
  
  # ReadOnlyFile /saved/specialvideo.ffm
  
  # This marks the file as readonly and it will not be deleted or updated.
  
  
  
  # Only allow connections from localhost to the feed.
  
  ACL allow 127.0.0.1
  
  
  
  </feed>
  
  
  
  
  
  ##################################################################
  
  # Now you can define each stream which will be generated from the
  
  # original audio and video stream. Each format has a filename (here
  
  # 'test1.mpg'). FFServer will send this stream when answering a
  
  # request containing this filename.
  
  
  
  <stream>
  
  
  
  Feed feed.ffm
  
  Format mp4
  
  
  
  # Audio settings
  
  NoAudio
  
  
  
  # Video Settings
  
  #VideoSize 1280x720                      # Video resolution
  
  #VideoFrameRate 30                      # Video FPS
  
  #AVOptionVideo flags +global_header          # Parameters passed to encoder
  
  #AVOptionVideo cpu-used 0
  
  #AVOptionVideo qmin 10
  
  #AVOptionVideo qmax 42
  
  #AVOptionVideo quality good
  
  PreRoll 0
  
  StartSendOnKey
  
  #VideoBitRate 400                      # Video bitrate
  
  
  
  </stream>
  
  
  
  # Server status
  
  
  
  <stream>
  
  Format status
  
  
  
  # Only allow local people to get the status
  
  ACL allow localhost
  
  ACL allow 192.168.0.0 192.168.255.255
  
  
  
  </stream>
  
  
  
  
  
  # Redirect index.html to the appropriate site

  And here is the command I’m issuing through the command line and the respective output :

  ffmpeg -s 1280x720 -f video4linux2 -r 30 -vcodec h264 -re -i /dev/video0 -copyinkf -codec copy h**p://localhost:8090/feed.ffm
  
  ffmpeg version N-67036-g04a4fb8 Copyright (c) 2000-2014 the FFmpeg developers
  
    built on Oct 20 2014 17:39:50 with gcc 4.8 (Ubuntu 4.8.2-19ubuntu1)
  
    configuration: --enable-gpl --enable-libx264
  
    libavutil      54. 10.100 / 54. 10.100
  
    libavcodec     56.  8.102 / 56.  8.102
  
    libavformat    56.  9.101 / 56.  9.101
  
    libavdevice    56.  1.100 / 56.  1.100
  
    libavfilter     5.  2.100 /  5.  2.100
  
    libswscale      3.  1.101 /  3.  1.101
  
    libswresample   1.  1.100 /  1.  1.100
  
    libpostproc    53.  3.100 / 53.  3.100
  
  Input #0, video4linux2,v4l2, from '/dev/video0':
  
    Duration: N/A, start: 12614.859199, bitrate: N/A
  
      Stream #0:0: Video: h264 (Constrained Baseline), yuvj420p(pc), 1280x720 [SAR 1:1 DAR 16:9], -5 kb/s, 30 fps, 30 tbr, 1000k tbn, 60 tbc
  
  Output #0, ffm, to 'h**p://localhost:8090/feed.ffm':
  
    Metadata:
  
      creation_time   : now
  
      encoder         : Lavf56.9.101
  
      Stream #0:0: Video: h264, yuvj420p, 1280x720 [SAR 1:1 DAR 16:9], q=2-31, -5 kb/s, 30 fps, 1000k tbn, 30 tbc
  
  Stream mapping:
  
    Stream #0:0 -> #0:0 (copy)
  
  Press [q] to stop, [?] for help
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 0, current: -166263; changing to 1. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 1, current: -134365; changing to 2. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 2, current: -102381; changing to 3. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 3, current: -66434; changing to 4. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 4, current: -34548; changing to 5. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 5, current: -2645; changing to 6. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 232857, current: 138514; changing to 232858. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 232858, current: 167942; changing to 232859. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 232859, current: 197415; changing to 232860. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 232860, current: 227037; changing to 232861. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 997959, current: 938599; changing to 997960. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 997960, current: 995052; changing to 997961. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 1240745, current: 1232841; changing to 1240746. This may result in incorrect timestamps in the output file.
  
  [ffm @ 0x28c7ea0] Non-monotonous DTS in output stream 0:0; previous: 1293561, current: 1282157; changing to 1293562. This may result in incorrect timestamps in the output file.
  
  frame=   69 fps= 34 q=-1.0 Lsize=     912kB time=00:00:02.01 bitrate=3702.1kbits/s

  When I try to play the stream with VLC for example - vlc h**p ://localhost:8090/stream.mp4 - i get the following error :

  [00007f5234003948] core stream error : cannot pre fill buffer

  And I can’t watch the stream on the web browser side also.

  Could someone give me an hint on this ?

  Many thanks and your help is much appreciated ! ;)