diff --git a/Documentation.html b/Documentation.html index 4977cd886..d945f9529 100644 --- a/Documentation.html +++ b/Documentation.html @@ -1743,12 +1743,51 @@ $cfg['TrustedProxies'] =
$cfg['TempDir'] string
- The name of the directory where temporary files can be stored. + The name of the directory where temporary files can be stored.

+ This is needed for native MS Excel export, see FAQ - 6.23 -
+ 6.23 and to work around limitations of + open_basedir for uploaded + files, see FAQ + 1.11. +

+ + If the directory where phpMyAdmin is installed is subject to an + open_basedir restriction, you need to create a + temporary directory in some directory accessible by the web + server. However for security reasons, this directory should be outside + the tree published by webserver. If you cannot avoid having this + directory published by webserver, place at least an empty + index.html file there, so that directory listing is not + possible. +

+ + This directory should have as strict permissions as possible as the only + user required to access this directory is the one who runs the + webserver. If you have root privileges, simply make this user owner of + this directory and make it accessible only by it: +

+ +
+chown www-data:www-data tmp
+chmod 700 tmp
+
+ + If you cannot change owner of the directory, you can achieve a similar + setup using ACL: + +
+chmod 700 tmp
+setfacl -m "g:www-data:rwx" tmp
+setfacl -d -m "g:www-data:rwx" tmp
+
+ + If neither of above works for you, you can still make the directory + chmod 777, but it might impose risk of other users on + system reading and writing data in this directory. +
$cfg['Export'] array
@@ -2447,11 +2486,9 @@ $cfg['TrustedProxies'] = uploading a file from the query box.

Since version 2.2.4, phpMyAdmin supports servers with open_basedir - restrictions. Assuming that the restriction allows you to open files in the - current directory ('.'), all you have to do is create a 'tmp' directory - under the phpMyAdmin install directory, with permissions 777 and the same - owner as the owner of your phpMyAdmin directory. The uploaded files will - be moved there, and after execution of your + restrictions. However you need to create temporary directory and + configure it as $cfg['TempDir']. + The uploaded files will be moved there, and after execution of your SQL commands, removed.