Beefy Boxes and Bandwidth Generously Provided by pair Networks
P is for Practical
 
PerlMonks  

Re: use lib './' security safe?

by hbo (Monk)
on Jul 20, 2004 at 03:58 UTC ( #375788=note: print w/ replies, xml ) Need Help??


in reply to use lib './' security safe?

According to the 3rd Blue Camel, "." should be in the default @INC, so adding it shouldn't be necessary for 5.6 and before. However, my Perl 5.8.1 shows this:

hbo@owen|1347> perl -e 'print join "\n",@INC' /usr/lib/perl5/5.8.1/i686-linux /usr/lib/perl5/5.8.1 /usr/lib/perl5/site_perl/5.8.1/i686-linux /usr/lib/perl5/site_perl/5.8.1 /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl
So it appears that the default has changed for 5.8, which came out after the last edition of Programming Perl.
Update: This is wrong. See beable's correction below.

Since use et al take the first match, there shouldn't be a danger of loading a bogus standard module if you have "."at the end of @INC. It's similar to having "./" at the end of your Unix PATH, however, in that what "./" means changes with your CWD. This opens up a possibility of loading a non-standard module that you don't expect. If you have root, (or administrator for *ix challenged) it's good practise to install your modules in the site_perl directories.

For my personal software, I create and use a ~/lib/perl and include the following at the top of my scripts:

use lib /path/to/my/home/lib/perl;
That way I avoid the pesky relative path.


Comment on Re: use lib './' security safe?
Select or Download Code
Re^2: use lib './' security safe?
by beable (Friar) on Jul 20, 2004 at 04:09 UTC
    Are you sure you didn't miss the dot on the end? Please run this: perl -e 'print join "\n",@INC,"\n"'
      Yup, you are correct. The "." appeared at the beginning of my prompt on the next line and I missed it.

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://375788]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others chilling in the Monastery: (14)
As of 2015-07-06 17:03 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    The top three priorities of my open tasks are (in descending order of likelihood to be worked on) ...









    Results (77 votes), past polls