CGI/Perl Guide | Learning Center | Forums | Advertise | Login
Site Search: in

  Main Index MAIN
INDEX
Search Posts SEARCH
POSTS
Who's Online WHO'S
ONLINE
Log in LOG
IN

Home: Perl Programming Help: Intermediate:
Blank wekpage after turning on taint mode

 



ningji
User

Jan 21, 2016, 3:37 PM

Post #1 of 3 (2562 views)
Blank wekpage after turning on taint mode Can't Post

so was using basic cgi + lighttpd, the website runs fine except the security level is low.

Following this to turn on taint mode,
https://redmine.lighttpd.net/issues/1685
echo "#!/bin/sh\nexec perl -T $@" > /usr/sbin/perl-taint-cgi
chmod a+rx /usr/sbin/perl-taint-cgi
cgi.assign = ( ".pl" => "/usr/sbin/perl-taint-cgi" )

restart linux server, then,
0. use "#!/usr/bin/perl -wT" in index.pl
1. from linux console, run "perl -T index.pl" works fine.
The output is the same as the original one without taint mode.
2. open browser, index.pl gives me a blank webpage. Viewing source gives me empty content.

very confused, why is this please ?


FishMonger
Veteran / Moderator

Jan 21, 2016, 4:43 PM

Post #2 of 3 (2559 views)
Re: [ningji] Blank wekpage after turning on taint mode [In reply to] Can't Post

Did you check the error log? It should give you some info why it failed.


ningji
User

Jan 22, 2016, 7:08 AM

Post #3 of 3 (2541 views)
Re: [FishMonger] Blank wekpage after turning on taint mode [In reply to] Can't Post

Good suggestion,

it says
SSL: 1 error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher

The only change is to use perl in taint mode.
Guess i need to search more.
Thanks !


In Reply To
Did you check the error log? It should give you some info why it failed.


 
 


Search for (options) Powered by Gossamer Forum v.1.2.0

Web Applications & Managed Hosting Powered by Gossamer Threads
Visit our Mailing List Archives