[freeside] httpd.conf fails with ($MLDBM::RemoveTaint=1;) with both updated versions of Redhat9 and RedhatEL3

[Randall Lucas]

You are using Apache 2, which is evil and broken.  It is inexplicable 
why Red Hat ships EL3 with Apache 2.0.

For more on why Apache 2 is a bad idea and NOT ready for production, see 
http://blogs.law.harvard.edu/rlucas/2004/04/01#a32

For my notes on backing RH9 back down to Apache 1.3, see 
http://blogs.law.harvard.edu/rlucas/2003/08/26#a13

Please see previous list postings on this topic as well.

Randall

PS, it's probably possible to re-write the apache conf directives that 
are failing for use with Apache 2.0.  But it's still very shakey to use 
Apache 2 with anything mod_perlish.

The Salisburys wrote:

> Almost identical failure with 2 different systems
> 
> Ryan
> 
> I saw your post yesterday.   "[freeside] Email aliases "
> 
> It seems you have got further than myself.
> 
> the 3 lines below when hashed out allows a correct syntax check for httpd.conf But when unhashed causes a failure.
> 
>  #<Perl>
>  #$MLDBM::RemoveTaint = 1;
>  #</Perl
> 
> Did you have trouble at this point?
> 
> My redhat EL 3 is a centos distro.
> 
> 
> 
> Errors:
> 
> "Syntax error on line 1047 0f /etc/httpd/conf/httpd.conf             (RedhatEL3  with postgres)
> Perl not allowed here"
> 
> "Syntax error on line 1047 0f /etc/httpd/conf/httpd.conf                (Redhat9 with mysql )
> <Perl not allowed here"
> 
> 
> Added into httpd.conf:
> ##################################
> PerlModule Apache::ASP
>  <Directory /usr/local/apache/htdocs/freeside-asp>
>  <Files ~ (\.cgi)>
>  AddHandler perl-script .cgi
>  PerlHandler Apache::ASP
>  </Files>
>  #<Perl>
>  #$MLDBM::RemoveTaint = 1;
>  #</Perl>
>  PerlSetVar Global /usr/local/etc/freeside/asp-global/
>  PerlSetVar Debug 2
>  </Directory>
> ##################################
> 
> 
> thanks
> Roger
>