jalex wrote: > I'm running mod_perl 2.0.2 under apache 2.0.54. After adding "PerlSwitches > -wT" to my apache config, I wanted to test that I had taint mode was indeed > working, so I wrote a test script that purposely misused a CGI parameter, > expecting the taint exception to be thrown. I was surprised to find it was > not, so I wrote this small test case: > > #!/usr/bin/perl -T
Taint is not controlled by the shebang line on the script because taint it interpreter wide and must be turned on when the interpreter starts, IE when Apache starts. Try adding PerlSwitches -T to your httpd.conf -- Michael Peters Developer Plus Three, LP
