Hello, I just add a path to the security issue I fond yesterday: http://trac.osgeo.org/mapserver/ticket/4087 The value will not escape the single quote ... Thanks in advance to do what it should. Sincerely Stéphane Brunner -- camptocamp.com mapfish.org