Re: $ENV{PATH} and PerlTaintCheck On

2003-10-08 Thread Ged Haywood
Hi Stas, On Wed, 8 Oct 2003, Stas Bekman wrote: > Ged Haywood wrote: > > On Wed, 8 Oct 2003, James Tolley wrote: > > > >>How can I untaint $ENV{PATH}?? > > > > You have to do it in those (appropriate) places where the data appear, > > in every request. Use a substitution command to convert ch

Re: $ENV{PATH} and PerlTaintCheck On

2003-10-08 Thread Ged Haywood
Hi there, On Wed, 8 Oct 2003, James Tolley wrote: > Date::Manip is used from a module that's used from a handler. Perl dies > when I try to ParseDate or Unixdate a date - saying that $ENV{PATH} is > insecure. > > I've tried to set $ENV{PATH} = '...' in a BEGIN block, and I've tried > setting it

Re: $ENV{PATH} and PerlTaintCheck On

2003-10-08 Thread Stas Bekman
James Tolley wrote: Hi, Date::Manip is used from a module that's used from a handler. Perl dies when I try to ParseDate or Unixdate a date - saying that $ENV{PATH} is insecure. I've tried to set $ENV{PATH} = '...' in a BEGIN block, and I've tried setting it from PerlSetEnv PATH ... How can I untai

$ENV{PATH} and PerlTaintCheck On

2003-10-08 Thread James Tolley
Hi, Date::Manip is used from a module that's used from a handler. Perl dies when I try to ParseDate or Unixdate a date - saying that $ENV{PATH} is insecure. I've tried to set $ENV{PATH} = '...' in a BEGIN block, and I've tried setting it from PerlSetEnv PATH ... How can I untaint $ENV{PATH}?? M