id: 06b6f4fcf30d425f81fe010bf478ee2c
parent_id: fba68802d4fd4bccb094b22dae531b94
item_type: 1
item_id: d4ca32cc133647b0b09d1009cc296f28
item_updated_time: 1789573478598
title_diff: "[]"
body_diff: "[{\"diffs\":[[0,\"ne).\"],[-1,\" Agents on other machines\\\nreach it via **SSH tunnel** — never expose the port publicly.\"],[0,\" One\"]],\"start1\":3246,\"start2\":3246,\"length1\":95,\"length2\":8},{\"diffs\":[[0,\"onsent)\\\n\"],[1,\"  - **Write, form data (discovered 2026-09-16, WI-19 planning):** naive POSTs of form fields to the page URL are **silently ignored** (200 + re-render, no save). The real path is the AJAX form-session protocol: (1) POST `/dash/formRegisterAjax` with body `uri=<custom-urlencoded page path+query>&requiredTag=&f<i>=<t|c><element name>` (element index = DOM order; type `t`=text, `c`=checkbox; custom encoding = percent-encode everything except `[A-Za-z0-9_-]`) → response JS contains `setSessionID(<id>)` (responses are prefixed `alert('XSS!'); while(1); // CUTCUTCUT` — the client evals only the part after `CUTCUTCUT`). (2) POST `/dash/formEditAjax` with body `s=<session>&c=<coupon, start 0>&f=<elem index>&v=<value>&msgid=<n>` → `ackMessage(n); messageDone(10);`. Requests WITHOUT browser-like `Origin`+`Referer` headers are rejected `400 Cross-site request rejected`. Verified working against `/cms/psp0.1/summary` sections 102/106/116.\\\n  - **`#VALUE!` in `form2html.class` exports is a formatting artifact, NOT data corruption** — healthy projects (Rusty Emu 0.1) render `#VALUE!` in calculated % cells the same way. form2html is useless for verifying saves; use the phase-pie chart labels in the live page or wait for the datfile flush.\\\n  - **Live PD instance's data dir ≠ D:\\\\Development\\\\PSPData**: the running instance (16.09.) holds new nodes (WI-19-Logging-DB) in memory with no datfile/backup/log writes in that directory — the datfiles there end at the 31.08. shutdown. Locate the active PSPDATA before any file-channel writes (portability plan: pspdata belongs in the process-data repo anyway).\\\n\"],[0,\"- **File\"]],\"start1\":8627,\"start2\":8627,\"length1\":16,\"length2\":1623}]"
metadata_diff: {"new":{},"deleted":[]}
encryption_cipher_text: 
encryption_applied: 0
updated_time: 2026-09-16T15:53:50.579Z
created_time: 2026-09-16T15:53:50.579Z
is_locked: 0
type_: 13