I really want to keep -T to keep my script completely safe,
but I simply cannot get the script to completely execute. I am driving
myself crazy because I don't want to cop out and delete the -T.

I think I'm properly untainting my form variables (I've tried various ways -
this is one of them):

my $firstName=$q->param('firstName');

if ($firstName =~ /([\w\s\-\.',]+)/) {
    $firstName = $1;
} else { 
    err();
}

I do this with each piece of data. Then, assuming the person passes the quiz
I've given, I create an HTML certificate with a few of these
variables (DOES work with the -T switch), send an email (via sendmail)
confirming that they passed (does NOT work with -T) and finally
append the data to a text file (also does NOT work with -T). I don't get
compile errors - just no emails or file appends!

Apparently Perl is not allowing me to modify files or make the call to
sendmail; but the documentation is very sparse, and I'm running out of
ideas. Anyone have advice? Thanks!

[I also seem to vaguely recall a compatibility problem with Perl 5 and
Solaris 2.8 using -T: can anyone confirm this?]

Bill


-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to