[Speedycgi-users] Problem with SpeedyCGI
Brought to you by:
samh
|
From: Richard T. <tr...@as...> - 2003-10-31 15:11:28
|
I am attempting to run SpeedyCGI + Openwebmail on some mailservers. I
have installed the latest
version of both SpeedyCGI and Openwebmail. Everything works
wonderfully for about 5-10 minutes
and then these error messages start popping up in the log files.
[Thu Oct 30 13:58:06 2003] [error] [client 204.29.75.195] Insecure
dependency in require while running setuid at
/var/www/cgi-bin/openwebmail/ow-shared.pl line 1196.
[Thu Oct 30 13:58:35 2003] [error] [client 204.29.75.195] Insecure
dependency in require while running setuid at
/var/www/cgi-bin/openwebmail/ow-shared.pl line 1196.
I checked the ow-shared.pl file the error pops up as a Taint check
error when trying to
include config files. I hardwired a couple of them, but then the
error would just jump to
a different line and a different require.
$file="$config{'ow_cgidir'}/$file";
($file=~ /^(.*)$/) && ($file = $1);
require $file; # done only once because of %INC
From what I have read, doing a regex and referring to the file as $1
*should* make it pass the taint check. So I am
confused and I was wondering if you guys had seen this before? I am
desparatly needing to get openwebmail running
a tad faster.
Thanks!
Rich
|