nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

setup/lib should be protected same way as libraries

Browse Source
This commit is contained in:
Michal Čihař
2008-11-30 12:13:30 +00:00
parent 256a90dd8c
commit 2e7ee22e45
2 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
Documentation.html
View File

@@ -298,11 +298,12 @@ chmod o-rw config.inc.php # remove world read and write permissions
and your databases, or a login dialog if using and your databases, or a login dialog if using
<abbr title="HyperText Transfer Protocol">HTTP</abbr> or cookie <abbr title="HyperText Transfer Protocol">HTTP</abbr> or cookie
authentication mode.</li> authentication mode.</li>
<li>You should deny access to the <tt>./libraries</tt> subfolder in your <li>You should deny access to the <tt>./libraries</tt> and
webserver configuration. For Apache you can use supplied .htaccess file <tt>./setup/lib</tt> subfolders in your webserver configuration. For
in that folder, for other webservers, you should configure this yourself. Apache you can use supplied .htaccess file in that folder, for other
Such configuration prevents from possible path exposure and cross side webservers, you should configure this yourself. Such configuration
scripting vulnerabilities that might happen to be found in that code.</li> prevents from possible path exposure and cross side scripting
vulnerabilities that might happen to be found in that code.</li>
<li> <li>
It is generally good idea to protect public phpMyAdmin installation It is generally good idea to protect public phpMyAdmin installation
against access by robots as they usually can not do anything good against access by robots as they usually can not do anything good

3
setup/lib/.htaccess Normal file
View File

@@ -0,0 +1,3 @@
# This folder does not require access over HTTP
# (the following directive denies access by default)
Order allow,deny