4b7ad2646b
feedback/OKs from aja@ william@ jasper@ giovanni@ kevlo@ - move MESSAGE to README. - add missing dep on php-mysqli. - change the unpack/fake-install method to use the standard extract infrastructure. - @sample contrib/htaccess into .htaccess so apache can use it by default if allowoverride is enabled. this does some basic user-agent checks to reduce the risk of phpmyadmin sites showing up in search engines. - provide an @sample'd apache config file which enables use of the .htaccess file and restricts access to localhost. talk about this in README so people know what's going on. (phpMyAdmin has a history of security-related bugs, but because it's rather commonly used it's much better to have it in ports so that it can be updated easily; these changes make the default installation safer). |
||
---|---|---|
.. | ||
DESCR | ||
PLIST | ||
README |
$OpenBSD: README,v 1.1 2012/08/31 16:40:38 sthen Exp $ +----------------------------------------------------------------------- | Running ${FULLPKGNAME} on OpenBSD +----------------------------------------------------------------------- phpMyAdmin has been installed into ${INSTDIR}. If using Apache, you can make this accessible to clients by enabling the configuration file: # ln -s ../modules.sample/phpMyAdmin-httpd.conf /var/www/conf/modules/ # /etc/rc.d/httpd restart By default, this sets an alias for /phpMyAdmin and restricts access to connections coming from localhost. It also uses AllowOverride to enable an .htaccess file restricting access from search engine bots. (The previously recommended method of adding a symlink under htdocs/ is not compatible with <Directory> overrides). If you need to allow wider access, after considering security implications, edit /var/www/conf/modules.sample/phpMyAdmin-httpd.conf and restart Apache. You can check that you have a working installation by accessing: http://localhost/phpMyAdmin/index.php SECURITY WARNING ================ Be aware that phpMyAdmin is a frequently attacked target due to a history of security problems. You are advised to restrict access to trusted workstations or access it on localhost via an SSH tunnel.