phpMyAdmin for phpwcms

Get help with installation and running phpwcms here. Please do not post bug reports or feature requests here.
Post Reply
macangelo
Posts: 756
Joined: Sat 29. Nov 2003, 14:19
Location: Düsseldorf
Contact:

phpMyAdmin for phpwcms

Post by macangelo »

Hi,

where do I find the right phpMyAdmin to use with phpwcms (inside the include/inc_ext-folder)?

Thanks a lot

macangelo
Webdesign from Düsseldorf - made with phpwcms (most of it):
http://eyelikeit.com/index.php?de_beispiele-webdesign
Narcanti
Posts: 31
Joined: Fri 12. Dec 2003, 16:12

Find it at http://www.phpmyadmin.net/

Post by Narcanti »

There is no "right" phpmyadmin to use - it works indepently from phpwcms.
You should always use the latest version to avoid security leaks.

Latest stable is 2.8.0.2
http://www.phpmyadmin.net/home_page/downloads.php
Pappnase

Post by Pappnase »

hello

but don't forget to secure the folder with an htaccess file!
Narcanti
Posts: 31
Joined: Fri 12. Dec 2003, 16:12

Why?

Post by Narcanti »

:?:
Pappnase

Post by Pappnase »

hello

if you only uplaod php my admin into the ext folder it's unsecure! cos andody can find this dir and can work at your db!
User avatar
DeXXus
Posts: 2168
Joined: Fri 28. Nov 2003, 06:20
Location: USA - Florida

Post by DeXXus »

Especially if "default" folder name ( like... /phpMyAdmin-2.8.0.2 ) is used. An alternative to protecting with .htpasswd/.htaccess scheme is use a "unique" name for the install folder.
Pappnase

Post by Pappnase »

DeXXus wrote:Especially if "default" folder name ( like... /phpMyAdmin-2.8.0.2 ) is used. An alternative to protecting with .htpasswd/.htaccess scheme is use a "unique" name for the install folder.
hello dex

thanks for your better explanaition :-)
User avatar
DeXXus
Posts: 2168
Joined: Fri 28. Nov 2003, 06:20
Location: USA - Florida

Post by DeXXus »

$ANSWER = (PROBLEM) divided by (Pappnase + DeXXus)
Narcanti
Posts: 31
Joined: Fri 12. Dec 2003, 16:12

Authentication

Post by Narcanti »

Oh... I always set an authentication mode inside phpmyadmin.
So you will need the username and the password to use it...
That's why I thought there's no need to protect the directory....
User avatar
DeXXus
Posts: 2168
Joined: Fri 28. Nov 2003, 06:20
Location: USA - Florida

Post by DeXXus »

http://www.phpmyadmin.net/documentation/
Quick Install

1. Untar or unzip the distribution (be sure to unzip the subdirectories): tar -xzvf phpMyAdmin_x.x.x.tar.gz in your webserver's document root. If you don't have direct access to your document root, put the files in a directory on your local machine, and, after step 3, transfer the directory on your web server using, for example, ftp.

2. Ensure that all the scripts have the appropriate owner (if PHP is running in safe mode, having some scripts with an owner different from the owner of other scripts will be a problem). See FAQ 4.2 and FAQ 1.26 for suggestions.

3. Create the file config.inc.php in the main (top-level) directory (the one that contains index.php). You can use setup script provided in distribution (scripts/setup.php) to create basics of config file. See Setup chapter for details. If you don't like setup or want to fine tune resulting configuration, open (or create in case of starting from scratch) config.inc.php in your favorite editor and fill in there values for host, user, password and authentication mode to fit your environment. Look at libraries/config.default.php how these fields should be defined. Here, "host" means the MySQL server. Have a look at Configuration section for an explanation of all values. Please also read the remaining of this Installation section for information about authentication modes and the linked-tables infrastructure.

4. If you are using the auth_type configuration directive, it is suggested that you protect the phpMyAdmin installation directory, for example with HTTP–AUTH in a .htaccess file. See the multi–user sub–section of this FAQ for additional information, especially FAQ 4.4.

5. Open the file <www.your-host.com>/<your-install-dir>/index.php in your browser. phpMyAdmin should now display a welcome screen and your databases, or a login dialog if using HTTP or cookie authentication mode.

6. You should deny access to the ./libraries subfolder in your webserver configuration. For Apache you can use supplied .htaccess file in that folder, for other webservers, you should configure this yourself. Such configuration prevents from possible path exposure and cross side scripting vulnerabilities that might happen to be found in that code.
Post Reply