John ORourke <[EMAIL PROTECTED]> writes:

> I'm trying to use APR::Request::Param->charset(8) but it doesn't seem to be
> setting perl's UTF-8 flag as the documentation says it should.

Check the docs again- first you have to disable tainting by calling 

  $param->is_tainted(0);

for the utf-8 flag to be set on the $param.  It's a security risk
to set the charset to utf8 without first validating the input-
iow you should at least check that the reported charset is either 
0 or 8 before simply resetting it to 8.

-- 
Joe Schaefer

Reply via email to