Apache: The Definitive Guide, 3rd Edition

Perl Flags

When your scripts ran under mod_cgi, they started off with the “shebang line”:

#! /usr/local/bin/perl -w -T

Under mod_perl this is no longer necessary. However, it is tolerated, so you don’t have to remove it, and the -w flag is even picked up and invokes warnings. It would be too simple if all the other possible flags were also recognized, so if you use -T to invoke taint checking, it won’t work. You have to use PerlTaintCheck On, PerlWarning On in the Apache Config file. It is recommended that you always use PerlTaintCheck to guard against attempts to hack your scripts by way of dubious entries in HTML forms. It is recommended that you have PerlWarn on while the scripts are being developed, but when in production to turn warnings off since one warning per visitor, written to the log file on a busy site, can soon use up all the available disk space and bring the server to a halt.