[TWiki-Dev] [SVN] r6497 - twiki/branches/DEVELOP/bin

[<Cra...@nt...>]

Author: CrawfordCurrie
Date: 2005-09-21 04:28:18 -0700 (Wed, 21 Sep 2005)
New Revision: 6497

Modified:
   twiki/branches/DEVELOP/bin/configure
Log:
Item434: better detection of platforms that don't support safe pipes

Modified: twiki/branches/DEVELOP/bin/configure
===================================================================
--- twiki/branches/DEVELOP/bin/configure	2005-09-21 11:13:02 UTC (rev 6496)
+++ twiki/branches/DEVELOP/bin/configure	2005-09-21 11:28:18 UTC (rev 6497)
@@ -1689,12 +1689,19 @@
 web server (e.g. using the Apache <tt>SetEnv</tt> directive).
 HERE
               );
-        if ($perltype eq 'ActiveState' and 
-            Win32::BuildNumber() < $ActivePerlRecommendedBuild ) {
-            $n .= WARN("ActiveState Perl must be upgraded to build <strong>",
-                       $ActivePerlRecommendedBuild,
-                       "</strong> if you are going to use PERL5SHELL, which was broken",
-                       "in earlier builds.");
+        if( $perltype eq 'ActiveState' ) {
+            $n .= WARN(<<HERE
+ActiveState Perl on IIS does not support safe pipes, which is the mechanism used by TWiki to prevent a range of attacks aimed at arbitrary command execution on the server. You are *highly* recommended not to use this particular configuration on a public server!
+HERE
+                      );
+            if( Win32::BuildNumber() < $ActivePerlRecommendedBuild ) {
+                $n .= WARN(<<HERE
+ActiveState Perl must be upgraded to build <strong>
+$ActivePerlRecommendedBuild
+if you are going to use PERL5SHELL, which was broken in earlier builds.
+HERE
+                             );
+            }
         }
         $block .= _setting("PERL5SHELL", $n);
     };