phpMyAdmin 2.6.4-pl2 security patch

L

l0rdphi1

Verified User
Joined
Jun 22, 2003
Messages
1,471
phpMyAdmin 2.6.4-pl2 was released today, to fix a security problem.

Security alert:
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-4

Updated with:
Code: 
#!/bin/sh

cd /var/www/html

VERSION=2.6.4-pl2

wget aleron.dl.sf.net/sourceforge/phpmyadmin/phpMyAdmin-$VERSION.tar.gz
tar xzf phpMyAdmin-$VERSION.tar.gz
rm -rf phpMyAdmin phpMyAdmin-$VERSION.tar.gz

find phpMyAdmin-$VERSION -type f -exec chmod 640 {} \;
find phpMyAdmin-$VERSION -type d -exec chmod 750 {} \;
chown -R apache:apache phpMyAdmin-$VERSION
ln -s phpMyAdmin-$VERSION phpMyAdmin

perl -pi -e 's/(..auth_type..\s*=\s*.)config/${1}http/' phpMyAdmin/config.inc.php
perl -pi -e 's/(PmaNoRelation_DisableWarning..\s*=\s*)FALSE/${1}TRUE/' phpMyAdmin/config.inc.php

exit 0
 
Last edited:
Thank you

for the script,

replace

Code: 
rm -f phpMyAdmin phpMyAdmin-$VERSION.tar.gz


by

Code: 
rm -rf phpMyAdmin phpMyAdmin-$VERSION.tar.gz

otherwise, i had a message on my FC3 who says i cannot delete this folder.
 
Titam said:
Thank you

for the script,

replace

Code: 
rm -f phpMyAdmin phpMyAdmin-$VERSION.tar.gz


by

Code: 
rm -rf phpMyAdmin phpMyAdmin-$VERSION.tar.gz

otherwise, i had a message on my FC3 who says i cannot delete this folder.
Click to expand...
Ah, thanks for pointing that out. Fixed in my post. :)

Phi1.
 
RenDprogrammeur said:
How does i have to save this code in .bat or something or .sh and how must i open it ?


Can i use the code on Redhat Enterprise 3.0 ?
Click to expand...

Code: 
nano updatephpmyadmin

paste the code from l0rdphi1 in there

Code: 
chmod +x updatephpmyadmin
./updatephpmyadmin

It will probably work yes. Confirmed on CentOS 4.1 and Fedora 2 here.
 
Last edited:
You must log in or register to reply here.
Back
Top