From 6965e56ee678e5c7352d6dfe287953a7a3a1096d Mon Sep 17 00:00:00 2001 From: Cheng-Lung Sung Date: Sat, 13 May 2006 17:00:25 +0000 Subject: - update to 2.8.0.4 Release notes are at: https://sourceforge.net/project/shownotes.php?release_id=416383&group_id=23067 i) Update to version 2.8.0.4 to patch some security holes. See CVE-2006-2031 http://secunia.com/advisories/19659 http://pridels.blogspot.com/2006/04/phpmyadmin-xss-vuln.html ii) Provide a little guidance on how to get phpMyAdmin installed with PHP5 iii) Provide a little more guidance on how to configure Apache to work with phpMyAdmin. PR: 97185 Submitted by: matainer (Matthew Seaman) --- databases/phpmyadmin/files/pkg-message.in | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) (limited to 'databases/phpmyadmin/files/pkg-message.in') diff --git a/databases/phpmyadmin/files/pkg-message.in b/databases/phpmyadmin/files/pkg-message.in index a9f3636dad94..5a01bfd7c4f0 100644 --- a/databases/phpmyadmin/files/pkg-message.in +++ b/databases/phpmyadmin/files/pkg-message.in @@ -6,7 +6,16 @@ Please edit config.inc.php to suit your needs. To make phpMyAdmin available through your web site, I suggest -that you add the following to httpd.conf: +that you add something like the following to httpd.conf: Alias /phpmyadmin/ "%%PREFIX%%/%%MYADMDIR%%/" + + Options none + AllowOverride Limit + + Order Deny, Allow + Deny from all + Allow from 127.0.0.1 .example.com + + -- cgit v1.2.3