Recommend disabling access to libraries folder.
This commit is contained in:
@@ -64,6 +64,7 @@ $Source$
|
|||||||
libraries/display_tbl_links.lib.php, test/theme.php: Move javascript
|
libraries/display_tbl_links.lib.php, test/theme.php: Move javascript
|
||||||
stuff out of libraries folder.
|
stuff out of libraries folder.
|
||||||
* libraries/.htaccess: Deny access to libraries folder over HTTP.
|
* libraries/.htaccess: Deny access to libraries folder over HTTP.
|
||||||
|
* Documentation.html: Recommend disabling access to libraries folder.
|
||||||
|
|
||||||
2005-11-22 Sebastian Mendel <cybot_tm@users.sourceforge.net>
|
2005-11-22 Sebastian Mendel <cybot_tm@users.sourceforge.net>
|
||||||
* added test/theme.php: for testing themes
|
* added test/theme.php: for testing themes
|
||||||
|
@@ -183,6 +183,12 @@
|
|||||||
in your browser. phpMyAdmin should now display a welcome screen
|
in your browser. phpMyAdmin should now display a welcome screen
|
||||||
and your databases, or a login dialog if using HTTP or cookie
|
and your databases, or a login dialog if using HTTP or cookie
|
||||||
authentication mode.</li>
|
authentication mode.</li>
|
||||||
|
<li> You should deny access to libraries subfolder in your webserver
|
||||||
|
configuration. For Apache you can use supplied .htaccess file in that
|
||||||
|
folder, for other webservers, you should configure this yourself.
|
||||||
|
Such configuration prevents from possible path expossure and cross
|
||||||
|
side scripting vulnerabilities that might happen to be found in that
|
||||||
|
code.</li>
|
||||||
</ol>
|
</ol>
|
||||||
<a name="linked-tables"></a>
|
<a name="linked-tables"></a>
|
||||||
<h3>Linked-tables infrastructure</h3>
|
<h3>Linked-tables infrastructure</h3>
|
||||||
|
Reference in New Issue
Block a user