Registry is supposed to complain if a script sets -T flag on the first 
line, but PerlSwitches -T wasn't set in httpd.conf. In 1.x there was a 
whole func which was turning the taint mode on and at the same time a 
special var Apache::__T was created.

In 2.0 there is no special sub, since we can either use 'PerlSwitches 
-T' or 1.x's 'PerlTaintCheck On' which ends up setting -T anyway. So how 
can I test from a Perl code whether it's run under tainted mode or not?

I remember that a few weeks ago p5p has added a new special read only 
var (was it $^TAINT?) but that's 5.7.2+, what shell we do in 5.6.1?

Also are you sure that PerlTaintCheck and PerlWarn should go deprecated 
(compat)? I think these two are too important to not be overlooked by 
users, which is much easier to do with -T flag, especially if it mixes 
with some other switches.

Hmm, I wonder why not to make -T turned on by default and let users turn 
it off if they know what they are doing.

_____________________________________________________________________
Stas Bekman             JAm_pH      --   Just Another mod_perl Hacker
http://stason.org/      mod_perl Guide   http://perl.apache.org/guide
mailto:[EMAIL PROTECTED]  http://ticketmaster.com http://apacheweek.com
http://singlesheaven.com http://perl.apache.org http://perlmonth.com/


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to