[Mapserver-users] More beginner questions

Steve Lime steve.lime at dnr.state.mn.us
Mon Mar 3 17:39:48 EST 2003


Dending on your webserver you can also set the environment variables in
the server config. Apache has a SetEnv directive that I use for that
purpose.

Steve

>>> "Doug Cates" <doug at moximedia.com> 03/03/03 12:28PM >>>
You wrote:
1) whether I use GET or POST, too much information exists in the url
or
resulting web page about the actual location in the server of critical
files, such as the map file. I consider this a security problem.
Is there a mechanism to hide this (cookie, session id, etc)?

The best way to do this is to create an executable CGI wrapper program
like:

#! /bin/sh
# File: /var/www/cgi-bin/ms_world
#
MS_MAPFILE=/home/mapfiles/world.map
export MS_MAPFILE
/var/www/cgi-bin/mapserv

.... The call the wrapper (without the mapfile) instead of mapserv.

Doug
--
Doug Cates
Moxi Media Inc.
757 - 1641 Lonsdale Avenue,
Vancouver, BC, Canada V7M 2J5
Phone:  604-984-8109
Fax:    604-608-4764
E-Mail: doug at moximedia.com 
Web:    www.moximedia.com 



_______________________________________________
Mapserver-users mailing list
Mapserver-users at lists.gis.umn.edu 
http://lists.gis.umn.edu/mailman/listinfo/mapserver-users



More information about the mapserver-users mailing list