Michael Nachbaur wrote: > On May 3, 2005, at 9:34 AM, [EMAIL PROTECTED] wrote: > >> I have >> PerlAddVar DBIconfig blahblah >> >> and reference them from within perl. I've never used xsp so can't >> comment on it. >> Are environment vars considered safe? > > > Well, safer than placing your connection parameters into raw source I > would guess.
Indeed. I don't think they're even real environment variables, in the unix process sense. They get placed in %ENV by mod_perl, just like a standalone script being run by the normal perl interpreter. And they probably get picked up by system() and back-ticks. But I don't think those "environment variables" actually get placed in the process's set of environment variables. I could be wrong though. Is %ENV a special hash in Perl, like a built-in tie? Oh, and those variables aren't specific to the PostgreSQL driver (DBD::Pg). You can find them in the DBI man/pod page, although they're not collected in one place. You have to do a search for "DBI_". They should work for any DBI driver. bye --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
