in reply to Can you prevent MO=Deparse

I don't know whether you can turn tainting on in embedded programs, but if you can, you can at least prevent the trick above by turning tainting on.

Another way to prevent the construct above is to make your own custom perl, in which have removed any support for the backend modules. Then you statically link your C program against the modified perl.

Abigail

Replies are listed 'Best First'.
Re: Re: Can you prevent MO=Deparse
by zentara (Cardinal) on May 10, 2003 at 19:26 UTC
    Thanks Abigail-II, I tested using Taint mode on some scripts this afternoon, and it does indeed prevent it from being deparsed by the above method. Great.
[reply]
      Are you calling the system's perl? In that case all I need to do is rename it, and put a perl binary somewhere that adds -MO=Deparse to the commandline before calling the renamed perl to make the above trick work again.

      Makeshifts last the longest.

[reply]
        Oh what wicked web we weave..........:-)
[reply]

In Section Seekers of Perl Wisdom