Reply to thread

Message: [QUOTE="raw.com, post: 4816363"] Thanks, Gunnary. I installed your module (CGI::UploadEasy) and read through it and, of course, I'd reinvented a lot of what you already do there. However, I still won't be able to use your module directly, as I get the uploaded filenames from another place, not from the filenames associated with the uploaded file parameters. Additionally, I need to control the set of allowable content-types. However, when I saw that you take no specific action to untaint the CGI::upload()-returned filehandles I went back to trying my code in the debugger and I see that the error from File::Copy::copy referred not to the filehandle arg but to the destination arg, which is a string filename. Indeed, I'd forgotten to untaint that value, which came in part from a different CGI::param(). Once I fixed that I was able to run with taint-checking and, in fact, remove the use of IO::Handle::untaint() completely. Cheers, Richard [/QUOTE]