Dataset Issue Starting with 4.4.1

Hi All,

I am wondering if any other user is having the same issue or is it just me. I am using Dataset to publish the quest wifi for patients and visitors. It was working fine up until I upgraded to 4.4.1. I rebuilt the dataset a bunch of times with the same results. I can upload the same exact file not setting it to remote with no issue. Let me give you an example of what I am doing.

  1. I pull the randomized password from a sql table with crystal reports creating a CSV file that is then saved to a locally hosted web server.
  2. Next I have a dataset the should go to the internal site and pull the file.

  1. I go to the data tab and do the test and get “Unexpected Error, please contact support.”

Did you already define the columns,? You’ll want to make sure that your local web server is actually delivering the file as CSV and not rendering into HTML.

So no if you have 2 columns in your Wi-Fi CSV file, call it SSID,PASSWORD

You specify which column remotely maps with the column from your xibo dataset

I have 2 different CSV files one with the header and one without. the one without just has the password. the other has the header and password.
example 1 - header and password

Example 2 - password only

I have no issue importing manually so I don’t think it is an html rendering and it did work before I upgraded to 4.4.1 and the error continues on 4.4.2. I think I will try and build a new server and see if I can repeat the issue.

Created a new server and tested again with the exact same result. I will continue to manually upload the data but it was great to just having it automatic. I think a odbc connection from MSSQL would be even better. Then there would be no dumping from our SQL to a csv to add it to mysql. Just a thought.

Follow-up on the above issue, I build a 4.3 docker deployment tested the dataset as configured above and everything worked as expected then I upgraded and tested and got the same result I got with the original. this is totally reproducible.

Requests to local IPs are blocked now by default (to prevent an attacker from using a CMS hosted in your network to probe other servers or services that your CMS may be on the same network as).

See: Authenticated Server-Side Request Forgery (SSRF) in Remote DataSet Functionality · Advisory · xibosignage/xibo-cms · GitHub

In order to disable that behaviour and allow requests to the local network, add

$allowLocalNetworkRequests = true;

to your settings-custom.php file.

Made the changes and I am still in the same boat. I have created a workaround by creating a php site to generate the same result I was getting from the dataset. We are showing the daily password for the guest wifi, I was asked by one of the nurses to add a QR code to make it easier for the patients to scan the password so that is what I created. Password is changing daily and QR is working as expected. I still would like to take advantage of using the dataset but for now I have it. Please let me know if there is anything else I can try. Thanks for creating a great product! New England Life Care is a nonprofit and having a great product that is only costing us the license fee for the fire sticks is great and allows us to give our patients the look and feel of a high end for profit infusion suite and allowing us to run on a tight NonProfit budget.

Here is the example.