Question
Whenever I try to attach files in the Wiki or use the Draw plug-in, Apache complains:
Software error:
Insecure dependency in open while running with -T switch at /usr/local/lib/perl5/5.8.2/File/Copy.pm line 130.
I assume that this is because they've plugged a security hole. However, it's broken my working TWiki.
Environment
--
KevinGrumball - 27 Nov 2003
Answer
Could you try this and let us know if it solves the problem? Add the red lines to
twiki/bin/upload:
# Delete unwanted characters from filename, with I18N
my $nonAlphaNum = "[^${TWiki::mixedAlphaNum}" . '\._-]+';
$fileName =~ s/${nonAlphaNum}//go;
$fileName =~ s/$TWiki::uploadFilter/$1\.txt/goi; # apply security filter
$fileName =~ /(.*)/;
$fileName = $1;
--
PeterThoeny - 02 Dec 2003
I had the same problem. This did the trick for me. Thanks!
--
KurtStam - 18 Mar 2004
Sorry I took so long to reply. It's all OK now. Thanks.
--
KevinGrumball - 03 Jun 2004