[mapserver-users] Error messages contain private info

Frank Warmerdam warmerdam at pobox.com
Fri Jan 16 06:02:21 PST 2009


Jochen Topf wrote:
> When using Mapserver with a database and there is an error connecting to
> the database the error message sent to the client contains the database
> connect string including the password! Thats never a good idea. Can this
> be changed somehow?

Jochen,

I would suggest you review:

   http://mapserver.org/development/rfc/ms-rfc-18.html

I believe this has been implemented since roughly MapServer 5.0.

Best regards,
-- 
---------------------------------------+--------------------------------------
I set the clouds in motion - turn up   | Frank Warmerdam, warmerdam at pobox.com
light and sound - activate the windows | http://pobox.com/~warmerdam
and watch the world go round - Rush    | Geospatial Programmer for Rent




More information about the MapServer-users mailing list