Added warnings about the "only_db" setting

ChangeLog

@@ -13,6 +13,10 @@ $Source$
 	  displayed in the servers choice combo.
 	* libraries/common.lib.php3, lines 340-343: fixed erroneous variable name.
 	* libraries/bookmarks.lib.php3, line 29: removed unnecessary line of code.
+	* Documentation.html: added warnings about the use of the "only_db" setting
+	  thanks to Ignacio Vazquez-Abrams <ignacio at openservices.net>.
+	* config.inc.php3, line 50: changed the comment line for the "only_db"
+	  setting.
 
 2001-10-09  Lo<4C>c Chapeaux  <lolo@phpheaven.net>
 	* user_details.php3, lines 1232-1245 & 1254: fixed some bugs with modifying

Documentation.html

@@ -193,6 +193,12 @@
 
 <h2>Installation</h2>
 
+<p>
+    <font color="#bb0000">NOTE: phpMyAdmin does not apply any special security
+    methods to the MySQL database server. It is still the sysadmin's job to
+    grant permissions on the MySQL databases properly.</font>
+</p>
+
 <p>
     <font color="#bb0000">Warning for Mac users:</font> php seems not to like
     Mac end of lines character ("<tt>\r</tt>") and Stuffit unstuffs with Mac
@@ -375,7 +381,11 @@
     <dt><b>$cfgServers[n]['only_db']</b> string or array</dt>
     <dd>
         If set to a(an array of) database name(s), only this(these) database(s)
-        will be shown to the user.
+        will be shown to the user.<br />
+        <font color="#bb0000">Warning:</font> this setting does not replace the
+        privileges rules of the MySQL database server. If set, it just means
+        only these databases will be displayed but <font color="#bb0000">not at
+        all other databases can't be used.</font>
         <br /><br />
     </dd>
 

config.inc.php3

@@ -47,7 +47,7 @@ $cfgServers[1]['stduser']       = '';          // MySQL standard user (only need
 $cfgServers[1]['stdpass']       = '';          // MySQL standard password (only needed with advanced auth)
 $cfgServers[1]['user']          = 'root';      // MySQL user (only needed with basic auth)
 $cfgServers[1]['password']      = '';          // MySQL password (only needed with basic auth)
-$cfgServers[1]['only_db']       = '';          // If set to a db-name, only this db is accessible
+$cfgServers[1]['only_db']       = '';          // If set to a db-name, only this db is displayed at left frame
                                                // It may also be an array of db-names
 $cfgServers[1]['verbose']       = '';          // Verbose name for this host - leave blank to show the hostname
 $cfgServers[1]['bookmarkdb']    = '';          // Bookmark db - leave blank for no bookmark support