I think I just got burned on Mail::Send.
I've been using it for months/years with no problem, but now I'm writing a web app and Taint won't let me use Mail::Send

Insecure $ENV{PATH} while running with -T switch at /usr/share/perl5/Mail/Mailer/sendmail.pm line 16.

What got me is that I call this from code that is already running it under the apache config: PerlTaintCheck On. So how can the $ENV{PATH} be insecure if it passes on all the other calls in my code?
I'm assuming that the problem is something like this:
Mail::Send calls for the 'sendmail' alias which is in
/usr/sbin/sendmail
This is not part of my $ENV{PATH} but I didn't set it anywhere, I'm assuming that this was set somewhere, but I'm not setting it that I can see, nor can I set it to work.

Options?
Ideas?

--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
<http://learn.perl.org/> <http://learn.perl.org/first-response>


Reply via email to