[Maps-l] PostGIS Terminal
River Tarnell
river.tarnell at wikimedia.de
Tue Mar 8 22:43:50 UTC 2011
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Thomas Ineichen:
> a friend of mine programmed a nifty little interface for the OSM-database:
> http://toolserver.org/~ti/postgis-terminal/
> - Is it ok to run that on a public toolserver-website, as it gives
> access to the whole database?
Absolutely not. I have disabled this tool. Allowing any user on the
Internet to run arbitrary SQL queries on the database is be a massive
security problem, in addition to the problems Tim already mentioned.
- river.
PS: If you weren't sure it was okay, why didn't you ask before making it
available?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (NetBSD)
iEYEARECAAYFAk12sSYACgkQIXd7fCuc5vKcIACeKT4/CCPCwGDzMSKGhCOJaMJ3
P/AAn1f30WhgbaKbwV7lWaLsEH0zwSB5
=/6Gl
-----END PGP SIGNATURE-----
More information about the Maps-l
mailing list