One point of clarification. If a config file is referenced then when the mapfile is read then the value for PLUGIN is always interpreted as a key to the list of plugins. That is always the case for CGI/FastCGI where a config file is required. In the case of MapScript (or shp2map) loading a mapfile, the config file is optional and the value for PLUGIN works as prior versions if a config file is not referenced. This was done to minimize impact on scripts. If a mapfile serves dual purposes then a config file will be required and PLUGIN values represent keys.
--Steve On Mon, Mar 20, 2023 at 9:13 AM Jörg Thomsen (WhereGroup) < joerg.thom...@wheregroup.com> wrote: > Hello Benedek, > > > Is it mandatory now, to define the PLUGIN path from the global CONFIG > file? > > short answer: yes it's mandatory and it's a security issue. > > the documentation is very explizit > (see https://mapserver.org/mapfile/layer.html): > > > For MapServer >=8: > defining plugins for dataconnections in the config-gile > ... > > For MapServer <8: > defining plugins for dataconnections in the mapfile > > further in https://mapserver.org/mapfile/config.html : > > This block allows for keys to be mapped to plugin library paths. > > For example the MS SQL Plugin. > > **This registry of plugins avoids possible unsafe libraries being > > loaded by a mapfile.** > > Regards, Jörg > > > > > > > Am 20.03.23 um 14:51 schrieb Benedek Petrovicz: > > Hi! > > > > Before MapServer 8, I always defined the mssql plugin path in the > > mapfiles directly. > > It was a convenient way for my use case. > > > > Now from MapServer 8 there's the required global CONFIG file I have to > > define. > > Which is fine, but MapServer will only allow loading the plugin through > > that global CONFIG file. > > > > The CONFIG reference states the following: > > > > /"PLUGINS: This block allows for keys to be mapped to plugin library > > paths."/ > > > > For me, this means I can define a global plugin keyword if I want to, > > but I don't have to. > > In reality I don't have other options. At least I don't know about any. > > > > Is it mandatory now, to define the PLUGIN path from the global CONFIG > file? > > > > Thank you! > > Benedek Petrovicz > > > > _______________________________________________ > > MapServer-users mailing list > > MapServer-users@lists.osgeo.org > > https://lists.osgeo.org/mailman/listinfo/mapserver-users > > -- > Viele Grüße, > Jörg Thomsen > --------------------------------------------- > Aufwind durch Wissen! > Web-Seminare und Online-Schulungen > bei der www.foss-academy.com > --------------------------------------------- > > > Jörg Thomsen > WhereGroup GmbH > Bundesallee 23 > 10717 Berlin > Germany > > Tel: +49 (0)30 / 5130 278 74 > Fax: +49 (0)30 / 5130 278 11 > > joerg.thom...@wheregroup.com > www.wheregroup.com > > Geschäftsführer: > Olaf Knopp, Peter Stamm > Amtsgericht Bonn, HRB 9885 > > ------------------------------- > Folgen Sie der WhereGroup auf twitter: http://twitter.com/WhereGroup_com > > _______________________________________________ > MapServer-users mailing list > MapServer-users@lists.osgeo.org > https://lists.osgeo.org/mailman/listinfo/mapserver-users >
_______________________________________________ MapServer-users mailing list MapServer-users@lists.osgeo.org https://lists.osgeo.org/mailman/listinfo/mapserver-users