[mapserver-users] How to deal with (visible) CONNECTION information in .MAP file for WMS purposes

[Jeff McKenna]

On 2014-01-06 10:39 AM, Lime, Steve D (MNIT) wrote:
> You can also encrypt the database password using MapServer utilities. I do the following:
> 
>   - store the mapfiles outside web htdocs directory
>   - encrypt database passwords (if in a shared hosting environment)
>   - use webserver environment variables to reference mapfiles... this obfuscates your file system setup and makes your setup more portable since you reference the environment variable and not the file directly
> 
> Steve

Good point Steve.  Here are the docs for the msencrypt utility:
http://www.mapserver.org/utilities/msencrypt.html

-jeff




-- 
Jeff McKenna
MapServer Consulting and Training Services
http://www.gatewaygeomatics.com/