> >>>>> "SB" == Stas Bekman <[EMAIL PROTECTED]> writes:
>
> SB> I know some people believe that they can get away without this mode,
> SB> that's why it'd be the best if it'd be a variable and not a static value,
> SB> so those who don't want it will be able to turn it off. But in all modules
> SB> that deal with system I'd put the taintmode on.
>
> Taint mode must be selected at compile time because it alters the
> compiled code to insert the various checks into it. I suppose if one
> were to rewrite the checks to look at a variable to skip them, one
> could, but I doubt that will happen.
What happens if you have this:
PerlModule Foo
PerlTaintMode On
Won't the code be compiled with tainting off?
How then Perl knows that it should compile Foo differently?
But if somehow does know, what I'm asking for is a check of how the module
was compiled. And if it wasn't compiled with taint on, I could force the
module to die.
_____________________________________________________________________
Stas Bekman JAm_pH -- Just Another mod_perl Hacker
http://stason.org/ mod_perl Guide http://perl.apache.org/guide
mailto:[EMAIL PROTECTED] http://perl.org http://stason.org/TULARC
http://singlesheaven.com http://perlmonth.com http://sourcegarden.org
