[Midnightbsd-cvs] mports [17783] trunk/databases/phpmyadmin/files/pkg-message.in: update instructions for apache 2.4.x
laffer1 at midnightbsd.org
laffer1 at midnightbsd.org
Mon Oct 27 07:46:06 EDT 2014
Revision: 17783
http://svnweb.midnightbsd.org/mports/?rev=17783
Author: laffer1
Date: 2014-10-27 07:46:05 -0400 (Mon, 27 Oct 2014)
Log Message:
-----------
update instructions for apache 2.4.x
Modified Paths:
--------------
trunk/databases/phpmyadmin/files/pkg-message.in
Modified: trunk/databases/phpmyadmin/files/pkg-message.in
===================================================================
--- trunk/databases/phpmyadmin/files/pkg-message.in 2014-10-27 11:45:19 UTC (rev 17782)
+++ trunk/databases/phpmyadmin/files/pkg-message.in 2014-10-27 11:46:05 UTC (rev 17783)
@@ -8,6 +8,8 @@
To make phpMyAdmin available through your web site, I suggest
that you add something like the following to httpd.conf:
+For Apache versions earlier than 2.4:
+
Alias /phpmyadmin/ "%%WWWDIR%%/"
<Directory "%%WWWDIR%%/">
@@ -19,6 +21,18 @@
Allow from 127.0.0.1 .example.com
</Directory>
+For Apache version 2.4.x or above:
+
+ Alias /phpmyadmin/ "%%WWWDIR%%/"
+
+ <Directory "%%WWWDIR%%/">
+ Options None
+ AllowOverride Limit
+
+ Require local
+ Require host .example.com
+ </Directory>
+
SECURITY NOTE: phpMyAdmin is an administrative tool that has had several
remote vulnerabilities discovered in the past, some allowing remote
attackers to execute arbitrary code with the web server's user credential.
More information about the Midnightbsd-cvs
mailing list