On Jan 15, 2008 7:03 AM, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> On Jan 14, 5:29pm, [EMAIL PROTECTED] (Peter Scott) wrote:

> > use CGI::Carp qw(fatalsToBrowser);
> >
> It helped me , thanks.

Be sure to remove it when you deploy your program, so as not to assist
everyone who tries to break your program.

> But i have got strainge error "Insecure dependency in require while
> running setuid at /path/to/the/script"
> What is this?

When perl gives you a message you don't understand, you'll find the
explanation in the perldiag manpage.

In this case, it's a sign that perl is trying to keep you out of
trouble. Perl can see that an attacker might be sneaking something
past you, the way you're doing things. In short, a key operation is
being given data that a user could have tampered with, and therefore
it may not be secure to do that operation. See the full story about
taint checking in the perlsec manpage.

Cheers!

--Tom Phoenix
Stonehenge Perl Training

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
http://learn.perl.org/


Reply via email to