[Maps-l] PostGIS Terminal

River Tarnell river.tarnell at wikimedia.de
Tue Mar 8 22:43:50 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thomas Ineichen:
> a friend of mine programmed a nifty little interface for the OSM-database:
 
> http://toolserver.org/~ti/postgis-terminal/
 
> - Is it ok to run that on a public toolserver-website, as it gives  
> access to the whole database?

Absolutely not.  I have disabled this tool.  Allowing any user on the 
Internet to run arbitrary SQL queries on the database is be a massive 
security problem, in addition to the problems Tim already mentioned.

	- river.

PS: If you weren't sure it was okay, why didn't you ask before making it 
available?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (NetBSD)

iEYEARECAAYFAk12sSYACgkQIXd7fCuc5vKcIACeKT4/CCPCwGDzMSKGhCOJaMJ3
P/AAn1f30WhgbaKbwV7lWaLsEH0zwSB5
=/6Gl
-----END PGP SIGNATURE-----



More information about the Maps-l mailing list