Multiple Cross-Site Scripting Vulnerabilities in phpMyAdmin
Release date:Updated on:
Affected Systems:PhpMyAdmin 4.xDescription:--------------------------------------------------------------------------------Bugtraq id: 69268CVE (CAN) ID: CVE-2014-5273Phpmyadmin is an online management tool for MySQL databases. Its main functions include creating data tables online, running SQL statements, searching and querying data, and importing and exporting data.
Build phpMyAdmin in Centos7.2 compilation and installation mode,
Background description: phpMyAdmin is a convenient tool for managing MySQL databases through a browser.
Installation Method: In this article, all dependent software is compiled and installed using the latest source code.
Operating System: Centos7.2 x86_64-bit
1. Compile and install and configure httpd 2.4.7. Due to software dependency, install
file name index. php to be saved.
Open IIS and debug the PHP file http: // localhost/PHP/index. php
5. Configure PHP. ini
PhP5 does not support msql by default, so we need to configure PHP. Inc.
(1) set the extension pathFind the row in extension_dir; Extension_dir = "./"Add a line after this line (note that adding a line is not followed)Extension_dir = "D: \ PHP \ Ext"
D: \ PHP is the path for installing PHP. DLL cannot be loaded if the path is incorrect.
(2) Search for extension
Install phpMyAdmin in ubuntu Method 1: directly run the source code (1) to install apache, and run sudoapt-getinstallapache (2) phpMyAdmin is a MySQL management tool that manages MySQL directly from the web. Assume that the root directory of your web (web page storage) is/var/www/. assume that your main ubuntu installation of phpMyAdmin
Method 1: run the source
Install phpMyAdmin in ubuntu Method 1: directly run the source code (1) to install apache, and run sudoapt-getinstallapache (2) phpMyAdmin is a MySQL management tool that manages MySQL directly from the web. Assume that the root directory of your web (web page storage) is varwww. assume that the web access of your host is like this. 192.168. install phpMyAdmin on
For the gradual popularity of PHP, we can see: whether the blog program in the WordPress, or CMS program in the DEDECMS, or BBS program in the discuz!, are described as classic.
With different programming language choices, the database used by Web applications has changed and is learning from the MySQL camp instead. The study of phpMyAdmin is essential.
phpMyAdmin (PMA) is a PHP-written, can be online con
, although the system resource waste is not much, but the default PHP5 installation package does not necessarily exist in the corresponding DLL of this module, so you should follow the system error prompts to disable the corresponding module, the deactivation method, and how you open the module is the opposite. 4. There is a dependency between the modules, such as I want to open extension=php_exif.dll This module, then you must first open the Extension=php_mbstring.dll module, which may be the r
The popularity of PHP is obvious to all: WordPress in the BLOG program, DEDECMS in the CMS program, and Discuz In the BBS program !, Both are classic.With different programming languages, the databases used by WEB applications have also changed, and they have switched to the MySQL camp. PhpMyAdmin learning is essential.PhpMyAdmin (PMA for short) is written in PHP and can be used to control and operate MySQL online over the Internet. It is the preferre
Using PHP and MySQL development site, phpMyAdmin is a very friendly MySQL management tool, and free open source, many domestic virtual hosts have their own management tools, configuration is simple, Next, configure phpMyAdmin on the Linux server to manage the MySQL databaseFirst Visit phpMyAdmin homepage, the URL is: http://www.phpmyadmin.net/, enter after the do
First, configure the phpMyAdmin configuration, or you cannot log on.
Then you have to enter the phpMyAdmin under the Libraries directory, modify config.default.php file. Find $cfg[' Servers ' [$i] [' password '] = ',
Modified to $cfg[' Servers ' [$i] [' password '] = ' 123456′;
123456 is the password you want, restart MySQL after the new password takes effect.
The first step: admin rights account Login
If the phpMyAdmin permission for the deployment is all writable, that is, the permission is 777, the error "Wrong permissions on the configuration file, should not being world writable!" is reported.You can resolve this by modifying folder permissions:#chmod-R 755 phpMyAdmin(Ubuntu)$sudo chmod-r 755 PhpmyadinYou can also resolve the configuration file by modifying the phpMyAdmin:Locate
Programme I:
1. Enter the:mysql> state
2. Choose MySQL database:mysql> use MySQL;
3. Change user table Data:mysql> Update user set Password=password (' New password ') where user= ' root ';
4. Activation permission:mysql> FLUSH privileges;
5. Exit mysql:mysql> quit;
Change phpMyAdmin Password: Locate PHP configuration file config.inc.php set $cfg[' Servers ' [$i] [' password '] = ' set to the same password as above database ';
Programme II:
1.
Moon_lserver (moon) is a Linux next key to build APACHE+PHP+MYSQL+ZEND+PHPMYADMIN+GD library software, installation method is very simple, suitable for often build servers and rookie and lazy people to use.
Moon_lserver Software is the original developer of the source code, after the on-site compilation, simulation manual installation.
Moon_lserver V1.2 included in the program and version:
Apache 2.2.3
PHP 5.1.6
MySQL 5.0.27
Zend
First, software preparation:
Apache_2.2.14-win32-x86-no_ssl.msi
Php-5.2.11-win32.zip
Mysql-5.0.45-win32.exe
Phpmyadmin-3.2.3-all-languages.zip
Second, install and set up environment variables:Install apache_2.2.14 to C:\apache
Extract PHP5.2.11 to c:\php
Install mysql-5.0.45 to C:\mysql
Unzip the Htdoc directory of phpMyAdmin-3.2.3 to Apache
Add after environment variable-> system variable path; c:\php
On a server generally more than one site, more than a MySQL (and PHP collocation of the best combination) database. In order to prevent security risks, we generally set up a separate database access account for each database, the account only has access to the database permissions.
Download Address:
phpMyAdmin
Let's take a concrete look at the following:1, first we have to login phpMyA
When you use phpMyAdmin to restore a database, you usually use the online upload function, the biggest bug is that if your network status is not very good, you probably accidentally interrupted the import or export operation.Locate phpMyAdmin in the installation directory config.inc.php file found:$cfg [' uploaddir '] = ' upload '; $cfg [' savedir '] = ' save ';These two parameters may or may not be empty b
Tags: sql PHP phpmyadmin database garbledPHP uses a database when doing projects. When you create a database, you will inevitably enter Chinese characters. But in the SQL command console, the SQL statements are inserted in Chinese, and the final query comes out with the results. instead of. Looked very headache. I was just starting out. Set the default encoding in the phpMyAdmin, first change the database e
Label: Easy to use, because some business needs, phpmyadmin not put on the site server, so on-premises can be easily managed remote database Click to download will download a config.inc.php This file is placed in the root directory of the phpMyAdmin can be, log in when the user name and password more secure, there is cookies saved PHP/** Generated configuration file * Generated by:phpmyadmin 4.4.11 setu
phpMyAdmin is a graphical management tool for MySQL that allows you to manage your MySQL database on a web interface, which is not easy and fast.This installation and configuration is under the CentOS 6.4 system, the system has been deployed LNMP environment. For phpMyAdmin installation, you can choose Yum's online installation or download it on its official website and unzip it to your Web server directory
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.