Re: Trouble with mod_perl, Archive::Zip and taint mode

2008-05-29 Thread Roberto C . Sánchez
On Tue, May 27, 2008 at 05:48:14PM -0400, Perrin Harkins wrote: > On Sun, May 25, 2008 at 3:45 PM, Roberto C. Sánchez > > [Sun May 25 08:57:35 2008] [error] [asp] [11570] [error] error executing > > code for include /var/www/templates/Photo_page_edit.tmpl: Insecure > > dependency in open while runn

Re: Trouble with mod_perl, Archive::Zip and taint mode

2008-05-27 Thread Perrin Harkins
On Sun, May 25, 2008 at 3:45 PM, Roberto C. Sánchez > [Sun May 25 08:57:35 2008] [error] [asp] [11570] [error] error executing > code for include /var/www/templates/Photo_page_edit.tmpl: Insecure > dependency in open while running setgid at /usr/lib/perl/5.8/IO/File.pm > line 70. <--> ; compiled to

Re: Trouble with mod_perl, Archive::Zip and taint mode

2008-05-27 Thread Roberto C . Sánchez
Does anybody have any ideas on this? Regards, -Roberto On Sun, May 25, 2008 at 03:45:24PM -0400, Roberto C. Sánchez wrote: > [Please CC me on all replies] > > So, I am writing some simple code to allow a user to upload his own > photo galleries. The section of code giving me problems is this:

Trouble with mod_perl, Archive::Zip and taint mode

2008-05-25 Thread Roberto C . Sánchez
[Please CC me on all replies] So, I am writing some simple code to allow a user to upload his own photo galleries. The section of code giving me problems is this: my $scratch_dir = $gallery_dir . "/scratch"; my $zipper = Archive::Zip->new(); my $zip_stat = $zipper->read($destfile); if ($