[mapserver-users] posting variable to map file from html page
Dear Friend After installing mapserver 6.0.1 I have faced a problem that I could not post string variable into the map file. It was working well for mapserver 5.4.2 but it doesn't work for new version from html file I have sending eq_id to the map file and in layer I use the following SrcSQLSELECT sta_id,latitude,longitude from pgav where eq_id like %eq_id% /SrcSQL it was worked for mapserver 5.4.2 but I could not sent when I installed new version of map file. May be it caused by new apache2 server. But in case please help me. Regards... Murat ___ mapserver-users mailing list mapserver-users@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/mapserver-users
Re: [mapserver-users] posting variable to map file from html page
Murat, Starting at 6.0, you need to add a validation block to your layer. With validation, you include an expression that defines which characters are allowed to be passed in that variable. http://mapserver.org/cgi/runsub.html David. From: mapserver-users-boun...@lists.osgeo.org [mailto:mapserver-users-boun...@lists.osgeo.org] On Behalf Of Murat Beyhan Sent: Thursday, February 14, 2013 9:12 AM To: mapserver-users@lists.osgeo.org Subject: [mapserver-users] posting variable to map file from html page Dear Friend After installing mapserver 6.0.1 I have faced a problem that I could not post string variable into the map file. It was working well for mapserver 5.4.2 but it doesn't work for new version from html file I have sending eq_id to the map file and in layer I use the following SrcSQLSELECT sta_id,latitude,longitude from pgav where eq_id like %eq_id% /SrcSQL it was worked for mapserver 5.4.2 but I could not sent when I installed new version of map file. May be it caused by new apache2 server. But in case please help me. Regards... Murat ___ mapserver-users mailing list mapserver-users@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/mapserver-users
Re: [mapserver-users] posting variable to map file from html page
On 2/14/2013 10:11 AM, Murat Beyhan wrote: Dear Friend After installing mapserver 6.0.1 I have faced a problem that I could not post string variable into the map file. It was working well for mapserver 5.4.2 but it doesn't work for new version from html file I have sending eq_id to the map file and in layer I use the following SrcSQLSELECT sta_id,latitude,longitude from pgav where eq_id like %eq_id% /SrcSQL it was worked for mapserver 5.4.2 but I could not sent when I installed new version of map file. May be it caused by new apache2 server. But in case please help me. Regards... Murat In the newer version of mapserver you have to add validation regexs to all variables. This is a security update. read: http://mapserver.org/cgi/runsub.html -Steve W ___ mapserver-users mailing list mapserver-users@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/mapserver-users
