SID-02444: Find TWiki Extensions 0 extension found

Status:	Answered	TWiki version:	6.1.0	Perl version:	5.16.3
Category:	CategoryPlugins	Server OS:	Red Hat Enterprise Linux Server release 7.4 (Maipo), 2.6.32	Last update:	5 years ago

We just migrated to a new server and upgraded to 6.1. Everything appears to be working fine except I cannot Add or update any plugins/extensions. When I go to the add TWiki extensions page it comes up empty. No error on the screen but I do see the following in the /var/log/httpd/error_log file:

[Mon May 11 07:47:18.875046 2020] [cgi:error] [pid 8647] [client 10.1.1.1:54586] AH01215: [Mon May 11 07:47:18 2020] configure: CGI::param called in list context from package TWiki::Configure::UIs::PromptPASS line 49, this can lead to vulnerabilities. See the warning in "Fetching the value or values of a single named parameter" at /ncvnas/software/twiki/twiki/lib/CGI.pm line 437, <DATA> line 1., referer: http://server/twiki/bin/configure

I see a similar message in the support area but it is 5 years old...

-- Timothy Collins - 2020-05-11

Discussion and Answer

Likely a compatibility issue with that Perl version. Could you try this?

Index: TWiki/Configure/UIs/PromptPASS.pm
===================================================================
--- TWiki/Configure/UIs/PromptPASS.pm   (revision 30745)
+++ TWiki/Configure/UIs/PromptPASS.pm   (working copy)
@@ -46,7 +46,7 @@
     # Pass URL params through, except those below
     foreach my $param ( $TWiki::query->param ) {
         next if ( $nonos{$param} );
-        $output .= $this->hidden( $param, $TWiki::query->param($param) );
+        $output .= $this->hidden( $param, scalar $TWiki::query->param($param) );
         $output .= "\n";
     }

-- Peter Thoeny - 2020-05-11

Thanks for the reply. I made this change and I no longer get the message in the log but I still do not get anything when I attempt to add plugin/extension.

Find TWiki Extensions Consulting TWiki.org... To install an extension from this page, click on the link in the 'Action' column. Note that the webserver user has to be able to write files everywhere in your TWiki installation. Otherwise you may see 'No permission to write' errors during extension installation.

Extension Description Most Recent Version Installed Version Tested On TWiki Action 0 extensions out of 0 already installed

-- Timothy Collins - 2020-05-11

Check your twiki/lib/LocalSite.cfg for: =$TWiki::cfg{ExtensionsRepositories} = 'TWiki.org=(http://twiki.org/cgi-bin/view/Plugins/,http://twiki.org/p/pub/Plugins/)';=

Then try to simulate what the configure script does to access the plugins list:

http://twiki.org/cgi-bin/view/Plugins/FastReport?skin=text&contenttype=text/plain (it will redirect to https)

-- Peter Thoeny - 2020-05-12

Thanks again for your help. By researching this I came across that that LWP was not installed.

Once that was installed I am able to return my listing and maintain the Extensions.

-- Timothy Collins - 2020-05-12

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.