Java Mailing List Archive

http://www.apache-httpd.com/

Home » modperl.perl »

Re: parameters taintness

Perrin Harkins

2008-04-21

Replies: Find Java Web Hosting

Author LoginPost Reply
On Mon, Apr 21, 2008 at 2:53 PM, Eli Shemer <appar@(protected):
> I summed it down to this line of code
>
> my $id = $cookies{ANONYMOUS_ID}->value;
> if ($id =~ m/(.+)/) { $id=$1; }
>
> tie %session, 'Apache::Session::MySQL', $id,
> {
>  Handle   => $dbh,
>  LockHandle => $dbh
> };

You need to wrap that tie call in an eval, as shown in the
Apache::Session documentation. If it hangs rather than just failing,
the problem most likely has to do with the locking behavior.

- Perrin
©2008 apache-httpd.com - Jax Systems, LLC, U.S.A.