phpMyAdmin 2.6.0-pl3 and security alert

To update:
Code:
cd /var/www/html
wget [url]http://aleron.dl.sourceforge.net/sourceforge/phpmyadmin/phpMyAdmin-2.6.0-pl3.tar.gz[/url]
tar xzf phpMyAdmin-2.6.0-pl3.tar.gz
rm -f phpMyAdmin-2.6.0-pl3.tar.gz
mv phpmyadmin phpmyadminOLD
mv phpMyAdmin-2.6.0-pl3 phpmyadmin
chown -R admin: phpmyadmin
perl -pi -e 's/(..auth_type..\s*=\s*.)config/${1}http/' phpmyadmin/config.inc.php
perl -pi -e 's/(PmaAbsoluteUri_DisableWarning..\s*=\s*)FALSE/${1}TRUE/' phpmyadmin/config.inc.php
perl -pi -e 's/(PmaNoRelation_DisableWarning..\s*=\s*)FALSE/${1}TRUE/' phpmyadmin/config.inc.php
Phi1.
 
Thanks, phi1!

Your instructions helped immensely (as always). :)

My installation, though (FreeBSD 4.9), required a bit of tweaking since mine had a symlink as phpmyadmin and I needed to use a case-sensitive "phpMyAdmin". But your instructions were very easy to follow and it ws a breeze to upgrade.
 
It's the same report ;)

If we disable safe mode in php.ini and enable it via DA for users that need it, would the default folder /var/www/html be running PHP is safe mode? Would users that need it really get safe mode off? Would DA still run fine (plugins, etc.)?
 
It ain't the same report! It's the same site, but not same report. This is reported TODAY! Read before replying ;)
 
Just used this to update to rc1 incase anyone is interested:
Code:
#!/bin/bash

cd /var/www/html

VERSION=2.6.1-rc1

wget aleron.dl.sourceforge.net/sourceforge/phpmyadmin/phpMyAdmin-$VERSION.tar.gz
tar xzf phpMyAdmin-$VERSION.tar.gz
rm -f phpMyAdmin phpMyAdmin-$VERSION.tar.gz

chown -R admin:admin phpMyAdmin-$VERSION
ln -s phpMyAdmin-$VERSION phpMyAdmin

perl -pi -e 's/(..auth_type..\s*=\s*.)config/${1}http/' phpMyAdmin/config.inc.php
perl -pi -e 's/(PmaAbsoluteUri_DisableWarning..\s*=\s*)FALSE/${1}TRUE/' phpMyAdmin/config.inc.php
perl -pi -e 's/(PmaNoRelation_DisableWarning..\s*=\s*)FALSE/${1}TRUE/' phpMyAdmin/config.inc.php

exit 0
 
l0rdphi1 said:
To update:
Code:
cd /var/www/html
wget [url]http://aleron.dl.sourceforge.net/sourceforge/phpmyadmin/phpMyAdmin-2.6.0-pl3.tar.gz[/url]
tar xzf phpMyAdmin-2.6.0-pl3.tar.gz
rm -f phpMyAdmin-2.6.0-pl3.tar.gz
mv phpmyadmin phpmyadminOLD
mv phpMyAdmin-2.6.0-pl3 phpmyadmin
chown -R admin: phpmyadmin
perl -pi -e 's/(..auth_type..\s*=\s*.)config/${1}http/' phpmyadmin/config.inc.php
perl -pi -e 's/(PmaAbsoluteUri_DisableWarning..\s*=\s*)FALSE/${1}TRUE/' phpmyadmin/config.inc.php
perl -pi -e 's/(PmaNoRelation_DisableWarning..\s*=\s*)FALSE/${1}TRUE/' phpmyadmin/config.inc.php
Phi1.

I tried this and all way good but it still shows 2.5.0 any ideas?
 
1. Make sure that everything extracted and moved correctly and that 2.6.0-pl3 is really what is located in the /var/www/html directory.
(No errors when you ran the commands individually)

2. Might want to also make sure that the /var/www/html directory is where it is loading from. It probably is unless you made modifications for phpmyadmin or other default directory changes.

3. What browser are you using? Did you try clearing cookies and cache?
 
Back
Top