Tags:
create new tag
view all tags

Question

Whenever I try to attach files in the Wiki or use the Draw plug-in, Apache complains:

Software error: Insecure dependency in open while running with -T switch at /usr/local/lib/perl5/5.8.2/File/Copy.pm line 130.

I assume that this is because they've plugged a security hole. However, it's broken my working TWiki.

Environment

TWiki version: TWikiRelease01Feb2003
TWiki plugins: DefaultPlugin, EmptyPlugin, InterwikiPlugin
Server OS: RedHat Linux 8.0
Web server: Apache 1.x
Perl version: 5.8.2
Client OS: Any
Web Browser: Any

-- KevinGrumball - 27 Nov 2003

Answer

Could you try this and let us know if it solves the problem? Add the red lines to twiki/bin/upload:

    # Delete unwanted characters from filename, with I18N
    my $nonAlphaNum = "[^${TWiki::mixedAlphaNum}" . '\._-]+';
    $fileName =~ s/${nonAlphaNum}//go;
    $fileName =~ s/$TWiki::uploadFilter/$1\.txt/goi;  # apply security filter 
    $fileName =~ /(.*)/;
    $fileName = $1; 

-- PeterThoeny - 02 Dec 2003

I had the same problem. This did the trick for me. Thanks!

-- KurtStam - 18 Mar 2004

Sorry I took so long to reply. It's all OK now. Thanks.

-- KevinGrumball - 03 Jun 2004

Edit | Attach | Watch | Print version | History: r5 < r4 < r3 < r2 < r1 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r5 - 2004-06-03 - KevinGrumball
 
  • Learn about TWiki  
  • Download TWiki
This site is powered by the TWiki collaboration platform Powered by Perl Hosted by OICcam.com Ideas, requests, problems regarding TWiki? Send feedback. Ask community in the support forum.
Copyright © 1999-2026 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.