Dominique Quatravaux <[EMAIL PROTECTED]> wrote:
> I found the following behaviour in mod_perl, which is clearly
> unexpected: I use an Apache that can serve both mod_perl and PHP
> pages. I run it -X ; first I request the URI for this scriptlet
> (under mod_perl's Apache::Registry):
>
> #!/usr/bin/perl
> $ENV{"LEAKING"}="oops";
>
> Then I visit a PHP page that contains just phpinfo() - the LEAKING
> variable is passed to it, I can see it in the HTTP_ENV_VARS.
The whole idea of using the environemnt for communication within a
single process seems quite wrong to me.
Can't all these modules (your scripts, mod_ssl, etc) just use the
request object and/or Apache notes to communicate? That's exactly
what they're there for!
At least mod_perl can be told not to mess with the environment:
<Directory /my/modperl/webroot>
PerlSetupEnv Off
</Directory>
--
Roger Espel Llima, [EMAIL PROTECTED]
http://www.iagora.com/~espel/index.html
