[mapserver-users] WFS Filter Encoding and resulting DB-queries

[Yewondwossen Assefa]

Hi Stephan,

On 22/02/2011 3:44 AM, Stephan Holl wrote:
> Hello list,
>
> while playing with MapServer WFS Filter Encoding capabilities I found
> some strange things when it comes to form the DB-queries (the
> requested layer is PostGIS-driven).
>
> It seems that there will always be a full table-scan and later on the FE
> will be applied. Is this done by design?
>
  Filters that do include spatial filters end up using the mapserver 
experssions. 'Simple' filters should end be using traslated into the 
layer's filter expression and end up being used by postgis as part of 
the data selection. What does the filter encoding looks like?

> Using URL-substitutions of the Search-keyword and apply it to a
> FILTER-element the resulting SQL-query has the given WHERE-filter set.
> But this opens the door for SQL-injections AFAIK. Setting the
> validation pattern is a little prevention.
>
> Are there any other ways to realize a keyword-driven search with
> MapServer beside FE IsLike or FILTER-substitution?
>
> I am using MS 5.6.5 on debian stable.
>
> TIA
>
> 	Stephan
>
>
>
> _______________________________________________
> mapserver-users mailing list
> mapserver-users at lists.osgeo.org
> http://lists.osgeo.org/mailman/listinfo/mapserver-users


-- 
----------------------------------------------------------------
Assefa Yewondwossen
Software Analyst

Email: yassefa at dmsolutions.ca
http://www.dmsolutions.ca/

Phone: (613) 565-5056 (ext 14)
Fax:   (613) 565-0925
----------------------------------------------------------------


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.osgeo.org/pipermail/mapserver-users/attachments/20110223/7601df8e/attachment.html