Beefy Boxes and Bandwidth Generously Provided by pair Networks
"be consistent"

Re: Utility of "use lib qw{ . }" ?

by gellyfish (Monsignor)
on Jun 23, 2003 at 14:18 UTC ( #268169=note: print w/replies, xml ) Need Help??

in reply to Utility of "use lib qw{ . }" ?

The only time that you might want to use use lib '.' (and with extreme caution) is when running your program with taint mode (the -T switch) on, when the current directory is removed from @INC - this should be done with caution because it is not alway possible for a program to control what it's current working directory is before requiring or using any modules and in a less secure environment (such as a web server) there is a risk of malicious code in the current directory being substituted for that of a real module. At the very least one should assure oneself that the directories that are likely to be the working directory for your program are not world writeable - of course if it is necessary to add the (assumed) current working directory (probably the directory in which the program resides) to @INC when using '-T' then it is probably best to supply the absolute path rather than '.', which whilst having some postential impact on portability is actually more likely to work under some conditions as well as being more secure.


Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://268169]
and all is quiet...

How do I use this? | Other CB clients
Other Users?
Others musing on the Monastery: (2)
As of 2018-05-22 18:18 GMT
Find Nodes?
    Voting Booth?