Re: Re: Where am I ... Take 2

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 28/07/14 17:48, Christoph Becker wrote:
> Lester Caine wrote:
> 
>> Having now worked out the correct questions to ask, I've now discovered
>> that the magic value that I need to read via the browser is
>>
>> HKEY_CURRENT_USER\Volatile Environment\ViewClient_Machine_Name
> 
> Um, are you sure that is the correct key?  HKEY_CURRENT_*USER* seems
> doubtful.

This is EXACTLY where the information has been hidden ;)
The point is that this is VMWare View ... At least I think that is the
system being used.

>> This will apparently contain the asset number of the machine I need to
>> identify. It's IP address will not be contained in the browser header
>> since that is provided via the load sharing from a poll of IP addresses
>> managed by the VDI system rather than the physical IP address of the
>> machine.
>>
>> I believe that I need the customer to run something on the desktop in
>> order to make the variable available via the browser. It can't be read
>> direct via javascript?
> 
> No, access to the registry is hopefully impossible via browser-side
> JavaScript (otherwise that would be a security hole, IMHO).

The security hole in this particular case is NOT being able to identify
the location from which any suspicious activity is being attempted.
Currently they can't even say which building ...

> However, it might not be necessary to "run something" on the desktop; in
> the simplest case an appropriate shortcut to "start" the web application
> might suffice.  If the value of the environment variable COMPUTERNAME
> would be okay, it is as simple as:
>   http://www.example.com/computername=%COMPUTERNAME%

See previous thread, but the information I was missing previously is
documented above. The publicly available computer name is a random VDI
desk number from the pool and unrelated to the physical client device.

> (See
> <http://stackoverflow.com/questions/21315708/reading-environment-variables-with-javascript>.)
> 
> If you really need to send the value of a registry key, a small batch
> script should do the trick.
Something is needed that can read the real location information and
allow the browser to access it. The whole point of switching to a
browser based system was that we did not need custom code on the client
machines :(

-- 
Lester Caine - G8HFL
-----------------------------
Contact - http://lsces.co.uk/wiki/?page=contact
L.S.Caine Electronic Services - http://lsces.co.uk
EnquirySolve - http://enquirysolve.com/
Model Engineers Digital Workshop - http://medw.co.uk
Rainbow Digital Media - http://rainbowdigitalmedia.co.uk

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php





[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux