| View previous topic :: View next topic |
| Author |
Message |
intendedacceleration
n00b
Joined: 18 Nov 2003
Posts: 31
Location: Two Harbors, MN
|
 Posted: Tue Dec 09, 2003 5:51 am Post subject: quick and easy question on phpmyadmin security |
 |
|
I emerged the phpmyadmin package and liked how it is secure by default prompting you with a username and password before it will let you view the page.
My question is how exactly is it doing this, I can't find a .htaccess file in there, and looked through all the apache2 configs I could find. Just curious! Thanks!
P.S. This is my first go with gentoo and I am LOVING it! What a great server OS! |
|
| Back to top |
|
 |
intendedacceleration
n00b
Joined: 18 Nov 2003
Posts: 31
Location: Two Harbors, MN
|
| Posted: Wed Dec 10, 2003 4:08 am Post subject: |
|
|
| Bump, anybody? Should be an easy thing but I jsut can't figure it out! |
|
| Back to top |
|
|
splooge
l33t
Joined: 30 Aug 2002
Posts: 636
|
| Posted: Wed Dec 10, 2003 5:07 am Post subject: |
|
|
it uses php to connect to the mysql server and the username and password you are prompted for is a username and password that resides inside the database.... or something, bad explanation, bad grammar, ... /sigh
_________________
http://get.a.clue.de |
|
| Back to top |
|
|
intendedacceleration
n00b
Joined: 18 Nov 2003
Posts: 31
Location: Two Harbors, MN
|
| Posted: Wed Dec 10, 2003 5:12 am Post subject: |
|
|
| splooge wrote: | | it uses php to connect to the mysql server and the username and password you are prompted for is a username and password that resides inside the database.... or something, bad explanation, bad grammar, ... /sigh |
Are you sure? It's not a regular php login page but a pop up page authentication from what looks like a .htaccess file for the apache server. I guess my root password is the same for my mysql database as it is for my computer account. I should change one or the other to see. |
|
| Back to top |
|
|
ganiman
n00b
Joined: 11 Nov 2003
Posts: 28
|
| Posted: Tue Dec 16, 2003 7:07 pm Post subject: |
|
|
In the phpmyadmin folder, there is a config.something file. Look in there.
_________________
Ganiman |
|
| Back to top |
|
|
intendedacceleration
n00b
Joined: 18 Nov 2003
Posts: 31
Location: Two Harbors, MN
|
| Posted: Tue Dec 16, 2003 7:20 pm Post subject: |
|
|
| ganiman wrote: | | In the phpmyadmin folder, there is a config.something file. Look in there. |
The name of the file is config.inc.php, however this didn't really answer my question.
On this line:
| Code: | | $cfg['Servers'][$i]['auth_type'] = 'http'; |
It set's the auth type to http. This is what I expected it to be, however I can't figure out how the server is using http auth on that page. There is no .htaccess file for that page. What am I missing? |
|
| Back to top |
|
|
spp
n00b
Joined: 11 Jul 2003
Posts: 27
Location: Alexandria, VA USA
|
| Posted: Tue Dec 16, 2003 8:44 pm Post subject: |
|
|
PHP allows you to pop up HTTP Authorization Pages without the use of a .htaccess file. Look in your libraries/auth/http.auth.lib.php for how they do it.
Or, go here on how to do it.
SP
_________________
Installing Gentoo... (Still) |
|
| Back to top |
|
|
intendedacceleration
n00b
Joined: 18 Nov 2003
Posts: 31
Location: Two Harbors, MN
|
| Posted: Tue Dec 16, 2003 9:15 pm Post subject: |
|
|
| spp wrote: | PHP allows you to pop up HTTP Authorization Pages without the use of a .htaccess file. Look in your libraries/auth/http.auth.lib.php for how they do it.
Or, go here on how to do it.
SP |
Thank you, this is the answer I was looking for!  |
|
| Back to top |
|
|
|
Networking & Security
