Taint is always on and I don't know why?

[willjones]

I have checked the httpd.conf file and the perl.conf file that Apache uses and the PerlSwitches -T line is commented out. I did a grep for any file with the word 'taint' ignoring case, but couldn't uncover anything new. I have checked the individual script files and #/usr/bin/perl does not have a -T on it. However, for some reason I am still running in taint mode. I don't understand why? How can I control this? Is there another way of turning taint mode on/off globally for all files? Anyone have an idea as to why my files are still running in taint mode?

Thanks...

[moritz]

The easiest explanation is that you forgot to restart your web server, and that the old configuration (with PerlSwitches -T not commented out) is still in effect.

There are other reasons why taint checking might be performed, all of which are documented in perlsec. A common reason is the setuid or setgid bit in the permission mask of the script.

[Lawliet]

How do you know that taint mode is on?