My apache2.conf contains:
PerlSwitches -T
That's the right way.
I'm not entirely sure, but IIRC, if you run a <Perl> section or PerlLoadModule before PerlSwitches its too late to specify taint mode. I might be wrong, but it's worth checking.
warn tainted(param('foo')); # false for any given foo
Am I doing something wrong?
Where does tainted() come from? I'm not familiar with that function.
probably from Taint.pm (whose code is quite interesting if you take a look at it - a one liner with a paragraph of comments :)
--Geoff
-- Reporting bugs: http://perl.apache.org/bugs/ Mail list info: http://perl.apache.org/maillist/modperl.html