Re: security suggestion

[Richard L. Goerwitz]

"Randal L. Schwartz" wrote:

> I think y'all are missing it.  As soon as I have any Perl code access
> via Apache::Registry or anything like that, I can do this:
> 
>         *Apache::Registry::handler = \&my_trojan_horse;

Can you explain in what server-configuration context the above directive
would be executed?

(I'm not disputing anything you say; just trying to follow.)

-- 
Richard Goerwitz                                [EMAIL PROTECTED]

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]