My apache2.conf contains:

PerlSwitches -T


That's the right way.

I'm not entirely sure, but IIRC, if you run a <Perl> section or PerlLoadModule before PerlSwitches its too late to specify taint mode. I might be wrong, but it's worth checking.


warn tainted(param('foo')); # false for any given foo

Am I doing something wrong?


Where does tainted() come from? I'm not familiar with that function.

probably from Taint.pm (whose code is quite interesting if you take a look at it - a one liner with a paragraph of comments :)


--Geoff


-- Reporting bugs: http://perl.apache.org/bugs/ Mail list info: http://perl.apache.org/maillist/modperl.html



Reply via email to