Account key.

Message boards : Web interfaces : Account key.
Message board moderation

To post messages, you must log in.

AuthorMessage
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 13262 - Posted: 25 Oct 2007, 8:13:38 UTC

The web interfaces take several parameter types. Some are obvious, "cpid" for example, others, not so. Is there a list of what they all are and how to obtain them?
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 13262 · Report as offensive
Nicolas

Send message
Joined: 19 Jan 07
Posts: 1179
Argentina
Message 13278 - Posted: 25 Oct 2007, 15:27:04 UTC

It's described on the wiki: [trac]wiki:WebRpc[/trac]
ID: 13278 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 13279 - Posted: 25 Oct 2007, 17:28:12 UTC

Yes, okay, but that is not what I really mean. Sure, (using account-key as an example), if I know the users email address and their password, I can query for the key. But I don't, and would consider it wrong that I did, (I know their e-mail of course).

Yes, a computer savvy user could get their own account-key then send me that to use, but most team members aren't that good. I had kind of assumed that somewhere in the pages the user can see, they would be able to obtain their key and copy/paste it into a form I can give them.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 13279 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15477
Netherlands
Message 13281 - Posted: 25 Oct 2007, 17:56:54 UTC - in response to Message 13279.  

Yes, okay, but that is not what I really mean. Sure, (using account-key as an example), if I know the users email address and their password, I can query for the key. But I don't, and would consider it wrong that I did, (I know their e-mail of course).

Speaking of the account key only, you only need the email address. Not the password. Or else you wouldn't need the account key in the first place, as you'd be able to log into the account, using the email address and password (on some projects, the account name and password)

Example given: request account key of the BOINC forums.

The email address should be in the database. You can't request someone else's account key and send it to yourself. If you fill in your email address, you get your account key.
ID: 13281 · Report as offensive
Nicolas

Send message
Joined: 19 Jan 07
Posts: 1179
Argentina
Message 13286 - Posted: 25 Oct 2007, 18:37:12 UTC - in response to Message 13279.  

Yes, okay, but that is not what I really mean. Sure, (using account-key as an example), if I know the users email address and their password, I can query for the key. But I don't, and would consider it wrong that I did, (I know their e-mail of course).

Yes, a computer savvy user could get their own account-key then send me that to use, but most team members aren't that good. I had kind of assumed that somewhere in the pages the user can see, they would be able to obtain their key and copy/paste it into a form I can give them.

It's worse if they give you their account key than if they give you their password. Users can change their password, but not the account key, and both give you the same login possibilities.
ID: 13286 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 13295 - Posted: 26 Oct 2007, 7:09:59 UTC

Hmmm, I wanted to use the show_user RPC to provide my team with "per machine" stats as they have been asking for.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 13295 · Report as offensive
Profile Ananas

Send message
Joined: 27 Jun 06
Posts: 305
Germany
Message 13318 - Posted: 27 Oct 2007, 7:22:54 UTC
Last modified: 27 Oct 2007, 7:32:41 UTC

As long as you don't need cross project stats, you can access everything you need through the Account numbers which are listed in the links under the "Name" column on the team page.

If you need it cross-project, I wouldn't know any way to get it from the project pages, you would need the exported stats in that case.

The parameter names are not used consistent through the web pages, w.g. some use teamid and some need team_id instead.

Two pages accept "&format=xml" (team_lookup.php and show_user.php). As all others don't have the XML option for such a long time now, I doubt that they will ever have it.

You can go through the PHP code of the pages you want to scan and look for the get_int()/get_str() block, which is always close to the top of the source. They will tell you which optional parameters a page knows.


p.s.: I might have misunderstood - if you plan to use RPC, not the web interface, my reply would be pointless - sorry in that case.
ID: 13318 · Report as offensive
Nicolas

Send message
Joined: 19 Jan 07
Posts: 1179
Argentina
Message 13325 - Posted: 27 Oct 2007, 18:21:36 UTC - in response to Message 13318.  

Two pages accept "&format=xml" (team_lookup.php and show_user.php). As all others don't have the XML option for such a long time now, I doubt that they will ever have it.

show_user.php?format=xml doesn't list hosts unless you also pass the user's account key, which is the equivalent of his password.
ID: 13325 · Report as offensive
Profile Ananas

Send message
Joined: 27 Jun 06
Posts: 305
Germany
Message 13334 - Posted: 27 Oct 2007, 22:23:53 UTC

yep, that's what I mean, hosts_user.php (with userid parameter) has the information but is missing the option for XML output - harder to parse.
ID: 13334 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 13350 - Posted: 28 Oct 2007, 18:44:25 UTC
Last modified: 28 Oct 2007, 18:52:21 UTC

The problem with the exported stats is that even for small projects, the files are HUGE, and require a lot of processing where 99% of the content is useless, (other teams). If you run a team that has crunchers in most of the projects, then downloading the 3-4 stats files from each of the projects possibly several times a day is a real problem.

harder to parse.


That is why many teams still use screen scraper technology. We use RPC where we can, but there comes a limit. Screen scrapers are inefficient, and a pain to maintain, but with limited resources, what else can you do?
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 13350 · Report as offensive
Nicolas

Send message
Joined: 19 Jan 07
Posts: 1179
Argentina
Message 13352 - Posted: 28 Oct 2007, 21:21:27 UTC - in response to Message 13334.  

yep, that's what I mean, hosts_user.php (with userid parameter) has the information but is missing the option for XML output - harder to parse.

If hosts_user.php with userid parameter gives you the hosts, even if you aren't the owner, I see no reason for the XML version not to do the same.
ID: 13352 · Report as offensive
Profile Ananas

Send message
Joined: 27 Jun 06
Posts: 305
Germany
Message 13354 - Posted: 28 Oct 2007, 21:44:48 UTC - in response to Message 13352.  
Last modified: 28 Oct 2007, 21:48:58 UTC

... If hosts_user.php with userid parameter gives you the hosts, even if you aren't the owner, I see no reason for the XML version not to do the same.


If there was an XML version, it sure would do the same.

But as noted above, only team_lookup.php and show_user.php have an XML option.

I don't have the latest code snapshot here but I tried the XML option on hosts_user.php and it did nothing.

A wap version would be easy to parse as well, but that only exists for userw.php
ID: 13354 · Report as offensive

Message boards : Web interfaces : Account key.

Copyright © 2024 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.