[Chameleon-dev] [Bug 177] [wmsparse] security issue with wmsparse and IIS

[bugzilla-daemon at www.maptools.org]

http://www.maptools.org/bugzilla/show_bug.cgi?id=177

pspencer at dmsolutions.ca changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dmorissette at dmsolutions.ca



------- Additional Comments From pspencer at dmsolutions.ca  2004-10-28 18:40 -------
Jason, please try to replicate this issues with the latest chameleon.

Daniel, what is the feasibility of modifying wmsparse to run as a cgi or php
extension?

I am hesitant to invest too much time into this issue because I really think the
wmsparse utility needs to be rewritten as follows:

1. use sqlite database
2. support wms and wfs
3. modify phpwms in php_utils to use sqlite
4. check for other dependencies introduced by this
5. extensive testing of all affected code, including:
- mapbrowser
- chameleon

When this happens, this issue becomes moot.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.