Jump to content

All Activity

This stream auto-updates

  1. Past hour
  2. will_i_am_small

    Tags not Hiding Actors

    That explains it then. Is there a method to hide actors?
  3. WorldWideWebDev

    Security issue on linux emby servers

    Access to admin areas when not logged in. Problem :- Issue, ability to view settings, options, limited details, unable to update details ( i cannot ) however options are available and viewable to an extent, applying changes creates an error popup -Sign in Error- "Access token is invalid or Expired" see, (Happy with that) Well the fact is that i can see things which are on the admin panels, most areas when I or you have not logged in to the server. I can even tell you if you have Emby premier or not. Now is this an issue??? Im not a hacker, so i dont know how far someone could go, what can actually be done etc. That's why i'm here. Hopefully someone can shed some light. Background setup: - Tested vulnerability on two Emby servers. Both run Dietpi OS as a base, both Emby Premier, Both Odroid C2 SBC, both have multiple USB SSD drives, both run on SD card installations, Both are accessible from the internet on Http and Https, one has a domain name redirected with an A record to a static IP address, one uses http only and a ddns address. Both are standard Emby installations apart from one having fail2ban installed as well, but no extra linux services apart from the minimal, as Odroid C2s are good but not that good. Some plugins are installed on both, Music Brainz, MDB, Opensubs, NFO, DLNA, Trailers, Playback reporting etc. (if you believe these could be a cause, i'll be glad to do more testing) Also, i dont know if this is a Dietpi issue, i guess someone will alert me of this , if the vulnerability doesn't work for you on another OS. Thanks in advance. Recreate the issue: - Logout of the Emby if you are in, try this in another browser, Firefox, edge, try an incognito window, new private window, (this works on all of them by the way in my instance) Anyway, just do it a computer or browser that is not logged in. Even my Samsung phone does this. 1. open a browser and visit your Emby web UI, Remotely, on the phone via the 4-5G internet, locally via your installation Ip or server name, or via a domain name, whatever works for you. If you are prompted to login, great, if not prompted logoff. You may or not see the usernames to choose from or perhaps not, depending on your settings. If you are being prompted to login, don't, instead go to the address bar and remove everything in the address and only leave this: - (of course i am giving you an Ip example, your browser will have your Emby server Ip or domain name). Examples :- http://192.168.178.188:8099/web/index.html#!/ http://192.168.170.148:8096/web/index.html#!/ https://emby.myemby.com.au:443/web/index.html#!/ (Whatever, you get the gist) 2. Once you have removed all of the trailing address sections the fun begins. add the word "dashboard" to the end of the address. you end up with Ie :- http://192.168.170.148:8096/web/index.html#!/dashboard https://emby.myemby.com.au:443/web/index.html#!/dashboard etc. 3. now refresh the page, click go, click enter, it doesn't matter but the important part is to refresh the page when the address is seen correctly, this is the trick. you will see the login page once reloaded .. 4. The magic. now that you have inserted https://emby.myemby.com.au:443/web/index.html#!/dashboard in the address bar, click the big ( < ) in the upper left next to the big Emby logo on the refreshed login page. Not back in the browser, back within the Emby Login Page itself. 5. Now tell me if you have Emby Premier or just the standard version? 6. Do this with any section in the admin panel you wish to try, just add the sections name to the address bar, refresh the browser, once back to the login page, click the ( < ) arrow top left next the the Emby Logo to view that particular section. Again, not back in the browser but the back arrow within the Emby login page . 7. Try this with any Emby admin panel section name, you get the gist of this by now or is it only me????? users, apikeys, logs, scheduledtasks, plugins, databases, network etc., all of it. If you try using the user directory, say for instance "home" at the end of the address, refresh and click the back< button you won't see much, but if you have a custom css background , you will see the background page load. 8. I was unable to shutdown the server even though the button is visible, apply any changes, add users, view libraries or make any useful changes to affect my Emby servers, i guess that's logical as anyone doing this is not actually logged in. So it's not that much of a vulnerability i guess, but I'm not a programmer and actually have no clue if someone could do something in this area by looking at the page code, page source, developer options and the like. They would also have to find the exposed server before even getting into this.. Probably should have other means of reporting a problem in the report a problem section? Anyway i believe someone should have a look and tell me, if its only me or it's a bug of some sort. I've attached some screenshots of the areas i entered within the admin Ui without being logged in for reference Sorry i couldn't screenshot the whole screen with the address bar, windows doesn't let me, but anyway i hope i've outlined it thoroughly enough that it can be reproduced.
  4. Eagleheart

    Strm Files Pointing To Local Files Cannot Be Played

    That works. Thank you! Ideally, it would eventually work with the ones already embedded in the mkv as usual but I can move forward for now!
  5. Today
  6. Thanks! @Lukewhy isn't this split version button up at the top near the version dropdown and all the other buttons? Could it not be added to the 3dot menu as well where all the other commands are?
  7. Scroll down, it's further down the page.
  8. @Luke Same problem here. Client: Apple TV 2.0.5 Server: Emby Server 4.9.3.0 on Darwin 21.6.0 My gut feeling is that it might be related to subtitles or it might be related to the AppleTV screensaver. This has happened to me for a month or two but I think the behavior has slightly changed, possibly after a recent update of my server. Before the update of the server to 4.9.3.0, the subtitles stopped working ~5 seconds before the crash. The behavior after the update is that the subtitles work until the crash, but right after the crash, the AppleTV turns into screen saver mode. I am sorry I cannot be more sure about when/what happened. I have treated Emby as an appliance that just works, not like an application I have to debug. The change in behavior may have been caused by something else or it might be just random.
  9. @LukeLet's first discuss the bug and then the significance of doing this. Otherwise, why would we create a feature that exists and functions properly on client A, but on client B, it exists yet is unusable? So, if you consider this a bug, please fix it or remove it from client B, as it serves no purpose at all.
  10. @LukeThe current issue is that none of them (Drop shadow/Background color/Background opacity) are working. At least let's make Drop shadow achieve the same effect as on the iPhone/iPad client first.
  11. @LukeI don't think so. When you choose Text color = White and Drop shadow = None, the subtitle area of the video is exactly white at this time. Using a contrasting Background color to make the subtitles clear is a good choice. Please ensure that the Drop shadow can work properly on the previous client, thank you. The main purpose of "Background color/Background opacity" is also to distinguish the subtitles from the video screen.
  12. Sadly nothing i can do about it since it seems like a limitation of the Emby for Android TV app. Only advice i have is use and stick with the Emby app.
  13. @quickmicThanks for looking into this, I've also experienced another issue, I'll put the details here but if you'd like me to start a new topic as you solved my original one just let me know. Using Kodi I watched 2 downloaded episodes on my XBP which sync'd succesfully with my Emby Server, then with the XBP off I watched the rest of the series on my TV, then came the issue when I next restarted my XBP it resync'd with the Emby Server but unfortunately it overwrote the correct watched history resetting it to just the 2 episodes watched on the XBP. Hopefully it just another setting I've not set correctly Cheers, Bob
  14. Thx a lot for the hint. Tested the "Emby for Android" App on my Shield and Skip Credits (and also Intros) are working. Will consider switching to the main app (also when the devs are discussing to phase out the app). Yes, it seems it's not supported in the ATV app. Try the main app. It's working there.
  15. hadr0n

    SQLite3 optimization to improve media search speed?

    Well "When you run PRAGMA synchronous; in your terminal or SQL editor, you are only seeing the setting for your own connection, not Emby’s." No way to play much with the SQLite settings outside Emby then as I understand.
  16. So I've done some more testing with this and it's kind of annoying as unless I am being stupid I can't get it to do exactly what I want. If I set the preferred channel image source of the M3U tuner file from Dispatacharr to be Guide Data Source. I assume this means it will use the Emby Guide data I have setup for the EPG data which is using Sky Q London GBR-1000197-DEFAULT When I do this two example channels which have incorrect images, I assume from Gracenote are Sky Sports Golf (406) which has the same weird image for light, dark and light with colour. And also Sky Sports + (404) which has different light and dark images but they are for Sky Sports Arena which I believe was the old channel name. I've tested both of the above by deleting all 3 images for each channel refreshing my browser to make sure no logo is displayed and then I have carried out a guide data refresh which then picks up the same 3 logos for each channel again. To try and get around these two issues, as well as the fact that I personally don't like the black or white logos which seem to be provided using the Emby Guide Data for most of the channels. I set the preferred channel image source to be my M3U file which contains the correct logos for Sky Sports Golf and Sky Sports + as well as containing, in my opinion better images in the traditional sky red, blue and white colours which work on both light and dark themes nicely. After setting the above to M3U , deleting the existing images for the example channels Golf and Sky Sport + and then carrying out a Guide Data refresh. Golf picks up the correct image from my M3U file and puts it under the dark logo but the light and light with colour logos are still populated with the incorrect image from Gracenote. And for Sky Sports + I also get the correct image for the dark logo from the M3U but the incorrect version for the light and light with colour logos. The problem I have is that I use the dark theme on everything as the light theme is way to bright to look at, which means even though I have a correct logo from my M3U file it isn't displayed. The same thing happens for a lot of other channels, although they aren't actually incorrect images like these examples, they are just the less appealing, in my opinion, white and black images and the only way I can get it to show the logos from my M3U file is to use the light theme for Emby. The weird thing is, if I replace all 3 images with the one I want. Then it works correctly as you would expect and shows the logo I want when using either the dark or light theme in Emby. I can manually run a guide data refresh multiple times and my manually uploaded images are retained. But it seems that something runs over night which replaces my manually added images as with the ones from Emby Data/Gracenote as each morning the images are wrong. Again, as with my other recent posts, I appreciate this is all fairly minor stuff and it's not really a fault or a bug of Emby. But just reporting things that I personally would find beneficial if they were changed. I guess there are two things to this for me. 1. The Gracenote data seems to have the incorrect images at least for Sky Sports Golf and Sky Sports +. I know we have the other post about Gracenote channel number duplication. So maybe they have some work to do on their side. 2. It would be good if in Emby we could either manually specify which image to use for the channel logo which overrides the choice based on theme. Or if there was some way to lock the image so once it's been manually changed nothing can replace it with an image from an automated process. Sorry for the super long reply. Just trying to give as much information as possible. Thanks again.
  17. hadr0n

    SQLite3 optimization to improve media search speed?

    Hi, mmh except if I misunderstand something (which is possible), Emby does not apparently set synchronous to "normal" on my system (on the library.db file at least). emby-server is up while I print the synchronous value, so I guess it should display the value configured by the Emby database session. I don't have an idea about how much this would impact search performance though.
  18. Okay, now I'm observing the same issues with "New Emby" on the Shield...it sees the chapter markers, but doesn't offer to skip credits.
  19. I don't have any suggestions, but I can state that episodes with detected Credits are showing up correctly in my Emby ATV release. Unfortunately, I don't get the pop-up to go to the next episode either. @ebrDoes the ATV app not support this?
  20. brothom

    Song playlist stops randomly

    Okay I managed to greatly reduce this issue outside of my home network by changing the playback quality inside the Emby app. Apparently it's set to "automatic" by default and just raising it to the max (4 mbps) completely negates this specific issue. I also have audio which has quality greater than 4 mbps. Can we not add an option to these dropdowns "don't change quality" or something similar? I managed to pinpoint this specific issue because I noticed one of my users had their settings had been reverted to 1080p - 60 mbps everywhere.
  21. Emby for Android TV might not support custom markers for the end credits. Try with the normal Emby app. Side note: The developers have talked about phasing out the Emby for Android TV for the normal Emby App instead so you might consider switching.
  22. No Sir. It has always been on Windows. I wish I could move the Library to my NAS where everything else resides, but the playlist library doesn't let you specify. I've scanned the files in the library a dozen times but the playlists just still won't display.
  23. Thank you Luke. Mama is fine today. Alzheimer's. You just never know when the lightning is going to strike. I appreciate your kind words! You have always been so kind and patient and it is much appreciated.
  24. crusher11

    Sort Title for songs?

    So...it's not supported?
  25. kdackiw

    Poster <> Landscape Image Capture Flip?

    Could one just place a library setting to force the view to be portrait or landscape? How deep is this "first" page? I run my python script and have the majority of the first sort hits with good portrait posters. Still comes up the wrong way. Kev.
  26. That is my question, how do I split them in Emby? I don't see any option to do that, there is only the drop down under the version. They are already split on the file system I tried selecting the edit metadata, but no matter which of the versions is selected, the metadata editor always shows the same 2018 file in the file path?
  27. Hey guys. Discovered this nice plugin and tested it with the OCR docker to get credit markers for a few episodes. It works in the web GUI and Emby for Android app on my smartphone (emby showing the pop-up at the detected time). Sadly, on my Nvidia Shields with Emby for AndroidTV the markers are not shown (~1 min before end on my example episode). Instead it shows the default pop-up at 30 secs before the end. Searched this thread for Android tv and also the ATV app options but found no solution. Maybe I missed a setting...? Any hints? Thx a lot for your efforts on this plugin!!!!!
  1. Load more activity
×
×
  • Create New...