Beefy Boxes and Bandwidth Generously Provided by pair Networks
Do you know where your variables are?

Re: So, now what are taints?

by graff (Chancellor)
on Mar 29, 2004 at 02:32 UTC ( #340485=note: print w/replies, xml ) Need Help??

in reply to So, now what are taints?

It might clarify the idea if you rephrase the question as "what is tainted data?" Data should be considered "tainted" when it comes from a source outside the direct control and complete trust of your system and perl script, such as parameters being submitted on a web form from a remote client, or data coming through a port or socket from a remote host, or data in a file that has global write access.

"Taint" mode in perl is a method of making sure that "tainted data" is officially "quarantined", and is not allowed to be involved in any operation where it could cause damage (whether malicious or simply accidental), such as being used as part of a command line for a sub-shell, or part of an SQL statement passed to a database server, or executed as part of an "eval" block.

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://340485]
and all is quiet...

How do I use this? | Other CB clients
Other Users?
Others lurking in the Monastery: (3)
As of 2018-05-27 17:55 GMT
Find Nodes?
    Voting Booth?