Question

Follow up querstion from WebHomeBrokenAfterInstall: The new problem is that I get the following message when I try to edit my TWikiPreferences:

Insecure directory in $ENV{PATH} while running with -T switch at ../lib/TWiki/Store.pm line 518.

The problem is not obvious to me and a search of the support forum only turned up one unanswered question.

I found this in the TWiky.cfg file:

# Set ENV{'PATH'} explicitly for taint checks ( #!perl -T option ) # (Note: PATH environment variable is not changed if set to "")

What is it telling me to do?

• TWiki version: TWiki20011201.zip
• Web server: Apache
• Server OS: Mac OS X
• Web browser: IE 5.1 OS X
• Client OS: same

-- Fernando Pineda

Answer

It looks like $safeEnvPath in TWiki.cfg needs to be set to valid directories on your system. You can set it to an empty string in case all external programs have an absolute path and rcs is compiled with the correct path to the diff utility.

-- PeterThoeny - 31 Aug 2002

Try running the latest testenv, CVSget:bin/testenv - this shows you the PATH before and after $safeEnvPath is applied. Make sure there are no relative pathnames or '.' directories in the path, this is what the TaintChecking is complaining about.

-- RichardDonkin - 01 Sep 2002