[JPP-Devel] SVN: [4741] core/trunk/src/com/vividsolutions/jump/workbench/ui/ WorkbenchFrame.java

2016-01-05 Thread jump-pilot-svn
Revision: 4741 http://sourceforge.net/p/jump-pilot/code/4741 Author: edso Date: 2016-01-05 17:40:40 + (Tue, 05 Jan 2016) Log Message: --- cleanup logging Modified Paths: -- core/trunk/src/com/vividsolutions/jump/workbench/ui/WorkbenchFrame.java Modified

Re: [JPP-Devel] sql security

2016-01-05 Thread edgar . soldin
On 05.01.2016 12:45, Nicolas Ribot wrote: > Hi all, > > Concerning SQL, I can't see how we can protect from malicious SQL code > considering: > > OJ is not just an interface to SQL databases, but a complete SQL client > allowing to perform ANY kind of queries (as we open a connection to a > da

Re: [JPP-Devel] sql security

2016-01-05 Thread Nicolas Ribot
A quick test on QGis showed that their query filter interface works the same as ours: the formula editor generates a query based on user input, then wraps it into a LIMIT 0 clause, without performing any other test (";" in the query for instance). This filter, for instance, is executed and drops t

Re: [JPP-Devel] sql security

2016-01-05 Thread Nicolas Ribot
Hi all, Concerning SQL, I can't see how we can protect from malicious SQL code considering: OJ is not just an interface to SQL databases, but a complete SQL client allowing to perform ANY kind of queries (as we open a connection to a database then execute the statement in DB Query plugin, for ins

Re: [JPP-Devel] wfs enhancements

2016-01-05 Thread Rahkonen Jukka (MML)
Hi, With WFS 1.1.0 you can test what is the server side limit for maximum number of features. Just remember 1) use version=1.1.0 2) use plain &request=GetFeature without any filters, maxFeatures/count, or BBOX 3) use &resulttype=hits http://ows.terrestris.de/geoserver/osm/wfs?service=WFS&version