[mapserver-users] MapServer .map file security question

Mark Volz MarkVolz at co.lyon.mn.us
Tue Feb 19 07:45:18 PST 2013


Hi,

I have a server that I would like to run both internal and external applications on it.  I know I can use apache to limit who can access internal web pages.  However, is there any mechanism to stop an external user from drawing an internal actual .map file?  For example, what would stop someone from changing the requested map from: http://myserver/cgi-bin/mapserv.exe?map=External.map.  To:  http://myserver/cgi-bin/mapserv.exe?map=Internal.map.

I could see this as an issue if I want to enable wms.

Thanks
 
Mark Volz
GIS Specialist




More information about the mapserver-users mailing list