Dear Joshua,

I have gone through
http://www.apache-asp.org/faq.html#Insecure%20depec6cd400
so, I would like to have PerlTaintCheck On
in my httpd.conf for mod_perl secure and headers on.

So, I created  global.asa file in /home/httpd/asp directory,
from which i am able access the *.asp file on my apache server (Linux -
Redhat 6.2).

As you suggested to turn off the PerlTaintCheck Off, it's working .

So, now I want to turn on the PerlTaintCheck On in httpd.conf  and
would like to use global.asa file by putting the following line
in global.asa

  $MLDBM::RemoveTaint = 1;

How to get it done?
could you please give hint on using the global.asa on Linux/apache?
Is it only on Win32/IIS or it is applicable on Linux?
If the global.asa applicable on Linux/apache, please give me hint.

Thanks in advance.

-SubbaReddy


----- Original Message -----
From: "Joshua Chamas" <[EMAIL PROTECTED]>
To: "SubbaReddy M" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Saturday, November 10, 2001 2:24 PM
Subject: Re: Internal server error on Refreshing mod_perl page (
Apache::ASP )


> > SubbaReddy M wrote:
> >
> > Hello Gurus,
> >
> > [Sat Nov 10 11:54:32 2001] [error] Insecure dependency in eval while
running with -T switch at
> > /usr/lib/perl5/site_perl/5.6.1/MLDBM/Serializer/Data/Dumper.pm line 51.
> >
MLDBM::Serializer::Data::Dumper::deserialize('MLDBM::Serializer::Data::Dumpe
r=HASH(0x843bd20)', '$MlDbM{\'timeout\' => \'1005374203\'}')
> > called at /usr/lib/perl5/site_perl/5.6.1/MLDBM.pm line 155
> >         MLDBM::FETCH('MLDBM=HASH(0x843bd08)',
'07abbd5f03d200c6bac27a861f47e35e') called at
/usr/lib/perl5/site_perl/5.6.1/MLDBM/Sync.pm line 85
> >         MLDBM::Sync::AUTOLOAD('MLDBM::Sync=HASH(0x843a838)',
'07abbd5f03d200c6bac27a861f47e35e') called at
>
>
> This error comes from the mod_perl config: PerlTaintCheck On
> You can see more on this error at:
>
>   http://www.apache-asp.org/faq.html#Insecure%20depec6cd400
>
> I would not recommend trying to get Apache::ASP to run under
> PerlTaintCheck as its been a while since the author ( me )
> has done so, so there will likely be other errors in doing so
> than what's listed in the above FAQ item.  So find the config
> in your system *.conf files and turn it off for now.
>
> Future Apache::ASP support queries should be emailed to the
> email list specific to it.  You can subscribe to it at
>
>   [EMAIL PROTECTED]
>
> --Josh
>
> _________________________________________________________________
> Joshua Chamas                           Chamas Enterprises Inc.
> NodeWorks Founder                       Huntington Beach, CA  USA
> http://www.nodeworks.com                1-714-625-4051
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to