[go: nahoru, domu]
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

stable/master setup disabled in demo.phpmyadmin.net #13083

Closed
emanuelb opened this issue Mar 15, 2017 · 1 comment
Closed

stable/master setup disabled in demo.phpmyadmin.net #13083

emanuelb opened this issue Mar 15, 2017 · 1 comment
Assignees
@nijel
Labels
infrastructure
Milestone
4.7.1

Comments

@emanuelb
Copy link

Visit:
https://demo.phpmyadmin.net/STABLE/setup/
https://demo.phpmyadmin.net/master/setup/
Result:

Configuration already exists, setup is disabled!

The Stable setup is mentioned in documentation at:

phpmyadmin/doc/setup.rst

Line 524 in 9bc325f

server: <https://demo.phpmyadmin.net/STABLE/setup/>.

In case you want to generate configuration on these you can either download original package from https://www.phpmyadmin.net/ or use setup script on our demo server: https://demo.phpmyadmin.net/STABLE/setup/.

fix:
enable the setup in safe way? (currently will open SSRF attacks, see https://www.phpmyadmin.net/security/PMASA-2016-44/)
@ibennetch
Copy link
Member
ibennetch commented Mar 29, 2017 •
edited
Loading

Also, the try page has a "Setup script" link to https://demo.phpmyadmin.net/master-config/setup/, which suffers the same problems.

@nijel nijel self-assigned this Mar 30, 2017
@nijel nijel added this to the 4.7.1 milestone Mar 30, 2017
@nijel nijel closed this as completed in 73ab7f3 Mar 30, 2017
nijel added a commit that referenced this issue Mar 30, 2017
@nijel
Avoid trying to connect to MySQL server on demo
2c6c34f 
This way we avoid PMASA-2016-44 on the demo server.

Issue #13083

Signed-off-by: Michal Čihař <michal@cihar.com>
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jun 22, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@nijel nijel

Labels
infrastructure
Projects
None yet
Milestone
4.7.1
Development

No branches or pull requests
3 participants
@nijel @ibennetch @emanuelb