http://www.perlmonks.org?node_id=217638


in reply to Re: Re: Re: How to make a module aware of where it is installed?
in thread How to make a module aware of where it is installed?

Ok what if in Foo.pm before the require, I check to see that there isn't a left_hook(), right_hook(), captain_hook() etc. already defined in my package. If there is, I know something is bogus and refuse to continue.

Mind you, that doesn't help if I try to use a module within Bar.pm or Blurp.pm . So far I'm not but a user might want too for some reason. In that case they would have to repeat the check all over again. But having done so, they would have effectively prevented this type of attack no?

--
જલધર

  • Comment on Re: Re: Re: Re: How to make a module aware of where it is installed?

Replies are listed 'Best First'.
Re: Re: Re: Re: Re: How to make a module aware of where it is installed?
by chromatic (Archbishop) on Dec 05, 2002 at 02:59 UTC

    Nope. It's always possible to pull the rug out from under things if you have runtime access to the symbol table. If you're going to let me run arbitrary code as a plugin -- or if I have access to the running environment -- I will always be able to find a way to break things.

    Such is the nature of Perl.