Turn on taint mode (-T switch. See perlsec)is generally sound advice. However, if your cgi environment involves running under mod_perl, you will find this causes a warning message. Basically, you cannot enable taint mode under mod_perl with the -T switch on the shebank line.
From the mod_perl doco:
Since the -T switch doesn't have an equivalent perl variable, mod_perl provides the PerlTaintCheck directive to turn on taint checks. In httpd.conf, enable this mode with:PerlTaintCheck On
Now any code compiled inside httpd will be taint checked.
If you use the -T switch, Perl will warn you that you should use the PerlTaintCheck configuration directive and will otherwise ignore it.
Now, since you are running under an enviroment that is outside your control, you may wish to check whether mod_perl is in use, and if so, whether the PerlTaintCheck directive is in place.
In reply to Re: (Ovid) Re: Beginning Perl and Forms - -w Swtich
by Maclir
in thread Beginning Perl and Forms
by Stinger
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |