>>This code:
>>
>>#!/usr/local/bin/perl -wT
>>use strict;
>>use CGI;
>>my $q = new CGI;
>>print ("hi");
>>exit;
>>
>>produces this:
>>"Too late for "-T" option at w:\cgi-bin\admin\tainttest.pl line 1."
>
>The problem is that -T needs to be enabled so early in the invocation
>process that by the time a "perl foo.pl" command sees the shebang line,
>it's too late to set it. This also applies to the way .pl scripts are
>invoked on DOSish systems through file type associations.
>
>You can fix gthis by invoking it with "perl -T tainttest.pl" I don't know
>how you'd reasonably do this with a file type association double click
>unless you defined a new type, say .tpl.
>
>This *shouldn't* apply to when a script is executed by a web server, as CGI
>scripts of course should be. But maybe it does, on Windows; I'm just
>surprised I never heard of it before. In which case the .tpl idea may be
>the only way to go (ouch).
Thanks to everyone who replied to all this so quickly. The server I use (not
mine, web hosting service) is a Linux machine running Apache. I still get
the error on same error on the server ... am I just SOL when it comes to
taint checking or is there a way to smack the server around and make it do
what it sounds like it should be doing?
--Mark.
