I am using DBD-CSV with taint mode and I am getting the following when I try to perform a SQL Create/Update/Delete (CUD) operation:

Execution ERROR: Insecure dependency in open while running with -T switch at C:/Perl/lib/IO/File.pm line 185.

I have untainted all the inputs and it looks like its not happy with the filename, which is not user inputted.
I even used literal values to try and perform an SQL CUD operation but no luck..

File.pm is used by the DBD-CSV module and therefore I think File.pm is seeing the input parameters to its open method from CSV module as tainted.

This error only happens when I try to perform a SQL CUD operation as it will then change the file mode flag for the open method to write. As you know a file open with a write mode flag will fail in taint mode, do you have any thoughts.

Search Discussions

Related Discussions

Discussion Navigation
viewthread | post
Discussion Overview
groupdbi-users @
postedMar 24, '11 at 3:41p
activeMar 24, '11 at 3:41p

1 user in discussion

Karl Oakes: 1 post



site design / logo © 2022 Grokbase