-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Thomas Ineichen:
a friend of mine programmed a nifty little interface for the OSM-database:
- Is it ok to run that on a public toolserver-website, as it gives
access to the whole database?
Absolutely not. I have disabled this tool. Allowing any user on the Internet to run arbitrary SQL queries on the database is be a massive security problem, in addition to the problems Tim already mentioned.
- river.
PS: If you weren't sure it was okay, why didn't you ask before making it available?