Unable to Access phpadmin

Submitted by chiefguerra on Thu, 01/24/2013 - 22:03

I used to be able to access phpmyadmin just fine and lately after upgrading virtualmin I'm not able to access phpmyadmin @ www.themotorpool.org/phpmyadmin When I try to access it, it gives me an option to save a file.

Here's my phpmyadmin.conf configuration:

phpMyAdmin default Apache configuration

Alias /phpmyadmin /usr/share/phpmyadmin

    Options FollowSymLinks
DirectoryIndex index.php

<IfModule mod_php5.c>
    AddType application/x-httpd-php .php

    php_flag magic_quotes_gpc Off
    php_flag track_vars On
    php_flag register_globals Off
    php_admin_flag allow_url_fopen Off
    php_value include_path .
    php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp
    php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/
</IfModule>

Authorize for setup

AuthType Basic AuthName "phpMyAdmin Setup" AuthUserFile /etc/phpmyadmin/htpasswd.setup Require valid-user

Disallow web access to directories that don't need it

Order Deny,Allow Deny from All Order Deny,Allow Deny from All

Thanks, Ben

Status: 
Closed (fixed)

Comments

Submitted by andreychek on Thu, 01/24/2013 - 22:09

Howdy -- yeah, that can occur after applying the latest security update.

There's a security vulnerability in using the distro package alongside Virtualmin domains -- the permissions that are granted to allow that to happen allow a user to read any file in /home. The latest update shuts down that vulnerability, but that breaks the distro-supplied phpMyAdmin version.

Our recommendation is to remove the version of phpMyAdmin provided by your distro, and to instead install it via the Install Script.

Submitted by chiefguerra on Fri, 01/25/2013 - 08:31

I appreciate the help with this. I went ahead and uninstalled it and installed the script through virtualmin and get the following message when trying to access it. I am seeing that it was installed as I can see the folder in /home/themotorpool/public_html

Not Found

The requested URL /phpmyadmin was not found on this server.

Ben

Submitted by andreychek on Fri, 01/25/2013 - 09:16

It sounds like there may be a config file for that still residing in Apache somewhere... what output do you receive if you run this command:

find /etc/apache2 | xargs grep -i phpmyadmin

Submitted by chiefguerra on Fri, 01/25/2013 - 09:25

This is what I get:

/etc/apache2/conf.d/phpmyadmin.conf:# phpMyAdmin default Apache configuration /etc/apache2/conf.d/phpmyadmin.conf:Alias /phpmyadmin /usr/share/phpmyadmin /etc/apache2/conf.d/phpmyadmin.conf: /etc/apache2/conf.d/phpmyadmin.conf: php_admin_value upload_tmp_dir / var/lib/phpmyadmin/tmp /etc/apache2/conf.d/phpmyadmin.conf: php_admin_value open_basedir /us r/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/ /etc/apache2/conf.d/phpmyadmin.conf: /etc/apache2/conf.d/phpmyadmin.conf: AuthName "phpMyAdmin Setup" /etc/apache2/conf.d/phpmyadmin.conf: AuthUserFile /etc/phpmyadmin/htpasswd.se tup /etc/apache2/conf.d/phpmyadmin.conf: /etc/apache2/conf.d/phpmyadmin.conf:

Submitted by andreychek on Fri, 01/25/2013 - 09:34

Ah, there we go... the config file for phpmyadmin is indeed still in there.

Go ahead and delete this file:

rm /etc/apache2/conf.d/phpmyadmin.conf

And then restart Apache:

/etc/init.d/apache2 restart

After that, does it work for you?

Submitted by chiefguerra on Tue, 02/05/2013 - 15:01

I'm going to do that change as soon as I get home and will let you know.

Thanks for the help.

ben

Submitted by chiefguerra on Tue, 02/05/2013 - 17:01

Awesome! That worked~~~~~~~~~~~~~:)