Clickthrough tracker falling over with -T option on Perl

 
From: "Alex Judd" <alex@PROTECTED>
In-Reply-To: Re: Dada Priority Mail settings
Date: November 13th 2008

Hi Justin

Our servers appear to throw a security violation with the latest Dada when using the Clickthrough tracker as they consider the PATH environment to be unsafe (?) - error message below

Changing clickthrough_tracking cgi to just /usr/bin/perl without the -T makes it run quite happily

Software error:

Insecure $ENV{PATH} while running with -T switch at /usr/lib/perl5/5 6 1/Cwd pm line 92, line 1 Compilation failed in require at //DADA/Template/HTML pm line 430, line 1 BEGIN failed--compilation aborted at //DADA/Template/HTML pm line 430, line 1 Compilation failed in require at //jakarta-tomcat/webapps/ROOT/dada3/plugins/clickthrough_tracking c gi line 15, line 1 BEGIN failed--compilation aborted at //jakarta-tomcat/webapps/ROOT/dada3/plugins/clickthrough_tracking c gi line 15, line 1

For help, please send mail to the webmaster (x@y com), giving this error message and the time and date of the error

Also, when trying to login to a hidden and closed list by typing it's name on the admin screen, the latest Dada also falls over with a 500 error, which is fixed by (in our case) setting the hidden parameter in the database for the list in question back to 0

Weird but true!

Alex

rss/atom
‹ Dada Mail 3.0.1 Beta 1 Released
Index
Re: Dada Mail 3.0.1 Beta 1 Released ›
  • This mailing list is a public mailing list - anyone may join or leave, at any time.
  • This mailing list is a group discussion list (unmoderated)

  • Start a new thread, email: dadadev@dadamailproject.com

This is the developer discussion mailing list for Dada Mail.

If you are just looking for support Dada Mail, consult the message boards at:

https://forum.dadamailproject.com

Documentation for Dada Mail:

https://dadamailproject.com/d

Specifically, see the Error FAQ:

https://dadamailproject.com/d/FAQ-errors.pod.html

To post to this list, send a message to:

mailto:dadadev@dadamailproject.com

All subscribers of this list may post to the list itself.

Topics that are welcome:

  • Constructive critiques on the program (I like, "x", but, "y" needs some work - here's an idea on how to make this better...)
  • Bug/Error reports
  • Bug fixes
  • Request For Comments on any changes to the program
  • Help customizing Dada Mail for your own needs
  • Patches
  • Language Translations
  • Support Documentation/Doc editing, FAQ's, etc.
  • Discussion of any changes that you would like to be committed to the next version of Dada Mail -

Dada Mail is on Github:

https://github.com/justingit/dada-mail/

If you would like to fork, branch, send over PRs, open up issues, etc.

Privacy Policy:

This Privacy Policy is for this mailing list, and this mailing list only.

Email addresses collection through this mailing list are used explicitly to work within this email discussion list.

We only collect email addresses through our Closed-Loop Opt-In system.

We don't use your email address for any other purpose.

We won't be sharing your email address with any other entity.

Unsubscription can be done at any time. Please contact us at: justin@dadamailproject.com for any help regarding your subscription, including removal from the mailing list.

All mailing list messages sent from us will include a subscription removal link, which will allow you to remove yourself from this mailing list automatically, and permanently.

All consent to use your email address for any other purpose stated at the time of the mailing list subscription will also be revoked upon mailing list removal.