diff on new page without content
wiki.pl: Use of uninitialized value $diffText in string eq at /var/www/cgi-bin/wiki.pl line 2341.
wiki.pl: Use of uninitialized value $diffText in string eq at /var/www/cgi-bin/wiki.pl line 2342.
wiki.pl: Use of uninitialized value $diffText in string eq at /var/www/cgi-bin/wiki.pl line 2341.
wiki.pl: Use of uninitialized value $diffText in string eq at /var/www/cgi-bin/wiki.pl line 2342.
wiki.pl: Use of uninitialized value $diffText in string eq at /var/www/cgi-bin/wiki.pl line 2286.
wiki.pl: Use of uninitialized value in string eq at /var/www/cgi-bin/wiki.pl line 2286.
wiki.pl: Use of uninitialized value $diffText in string eq at /var/www/cgi-bin/wiki.pl line 2341.
wiki.pl: Use of uninitialized value $diffText in string eq at /var/www/cgi-bin/wiki.pl line 2342.
wiki.pl: Use of uninitialized value $diffText in string eq at /var/www/cgi-bin/wiki.pl line 2287.
wiki.pl: Use of uninitialized value in string eq at /var/www/cgi-bin/wiki.pl line 2287.
show IP address instead of faked DNS entry on RecentChanges
RecentChanges showed host names which dont make sense like localhost
or all IP addresses in a netblock resolve to the same host name.
The real IP address is lost then (apart from web server logs)
check if REMOTE_ADDR address resolves to a host name
resolve that host name to an IP address
if both ip addresses are the same, then host name is ok to use
wiki.pl: Use of uninitialized value within %UseModWiki::SaveNumUrl in numeric gt (>) at /var/www/cgi-bin/wiki.pl line 1926.
warning on normal page view, page contains BracketUrl ([http://...])
wiki.pl: Insecure dependency in unlink while running with -T switch at /var/www/cgi-bin/wiki.pl line 4774.
taint error on page delete
in DoDeletePage():
use new variable $unsafe_id for tainted id
untaint id (page name)
wiki.pl: Insecure dependency in open while running with -T switch at /var/www/cgi-bin/wiki.pl line 2946.
taint error on page lock/unlock
in DoPageLock():
use new variable $unsafe_id for tainted id
untaint id (page name)
untaints parameter $unsafe_uid
returns uid or 111 in error case
(UserID 111 means invalid UserID)
in InitCookie():
use new variable $unsafe_uid for tainted user id
