Insecure dependency while running with -T switch

Mysql更新的时候报错:
Insecure dependency in parameter 1 of DBI::st=HASH(0x19dd70)->FETCH method call while running with -T switch

  sub trick_taint {
      require Carp;
      Carp::confess("Undef to trick_taint") unless defined $_[0];
      my $match = $_[0] =~ /^(.*)$/s;
      $_[0] = $match ? $1 : undef;
      return (defined($_[0]));
  }



使用方法:
     my $xxx = trim($cgi->param('xxx'));
     trick_taint($xxx);



当执行外部Perl脚本的时候出现下面的错误
Insecure dependency in `` while running with -T

解决方法
    trick_taint($cl);
    $ENV{'PATH'} = '/bin:/usr/bin';
    delete @ENV{'IFS', 'CDPATH', 'ENV', 'BASH_ENV'};
    my @logs = qx($cl);


http://perldoc.perl.org/perlsec.html#Taint-mode

猜你喜欢

转载自xmeteor.iteye.com/blog/1670594