[Mapserver-users] Mapserver Security Issues

[Pedro A. Carrasco Ponce]

Michael Smith wrote:

> Hi all,
> 
> I plan on running Mapserver on a Windows 2003 Server running IIS 6.  What
> security issues should be considered for running Mapserver since I assume
> many of you are currently hosting Mapserver on your webs.  Does anyone have
> and suggestions, considerations, or web sites with any info on this?
> 
> One issue my IT dept. suggested was housing my "data" directory outside of
> my IIS wwwroot folder...is this a security concern?

Yes, if you don't want that somebody can download your data. All your 
data (shapefiles, etc.) and databases if you use (access files, dbf's, 
db's, etc), must be in a directory outside of the IIS wwwroot folder.

Regards.

-- 
Pedro