phpmyadmin.sh Addon

"Vulnerability in phpMyAdmin Lets An Attacker Perform DROP TABLE With A Single Click"

This Vulnerability in phpMyAdmin Lets An Attacker Perform DROP TABLE With A Single Click! - Cyber World Mirror

 

Don't know why but as i had disabled the automated upgrade using the cron i run it manually and i got this:

Code:

/root/tools/phpmyadmin_update.sh
cd /usr/local/nginx/html/15080_mysqladmin2828
git pull
From https://github.com/phpmyadmin/phpmyadmin
   b6c9556..42eb0bf  STABLE     -> origin/STABLE
From https://github.com/phpmyadmin/phpmyadmin
 * [new tag]         RELEASE_4_7_0RC1 -> RELEASE_4_7_0RC1
 * [new tag]         RELEASE_4_7_5 -> RELEASE_4_7_5
 * [new tag]         RELEASE_4_7_6 -> RELEASE_4_7_6
 * [new tag]         RELEASE_4_7_7 -> RELEASE_4_7_7
error: Your local changes to the following files would be overwritten by merge:
    composer.lock
Please, commit your changes or stash them before you can merge.
Aborting
Updating 6519211..42eb0bf
2018-01-02 23:03:04 URL:https://getcomposer.org/composer.phar [1845610/1845610] -> "composer.phar" [1]
Do not run Composer as root/super user! See https://getcomposer.org/root for details
Loading composer repositories with package information
Updating dependencies
Package operations: 2 installs, 7 updates, 0 removals
  - Installing symfony/polyfill-mbstring (v1.6.0): Downloading (100%)         
  - Updating phpmyadmin/sql-parser (v4.1.3 => v4.2.4): Downloading (100%)         
  - Installing psr/simple-cache (1.0.0): Downloading (100%)         
  - Updating symfony/cache (v3.2.7 => v4.0.2): Downloading (100%)         
  - Updating symfony/expression-language (v3.2.7 => v4.0.2): Downloading (100%)         
  - Updating phpmyadmin/motranslator (3.0 => 3.4): Downloading (100%)         
  - Updating phpmyadmin/shapefile (2.0 => 2.1): Downloading (100%)         
  - Updating tecnickcom/tcpdf (6.2.12 => 6.2.13): Downloading (100%)         
  - Updating phpseclib/phpseclib (2.0.4 => 2.0.9): Downloading (100%)         
Writing lock file
Generating autoload files

Don't know if that's the issue:

But after the upgrade i log out and re login and use also another browser and even if i did manual nprestart i can see the old version and not the updated 4.7.7

 

Problem found

I was missing the:

at the:

Using latest centminmod updated.....

Maybe Centminmod autoupdate that files?

Also when i run it on my second server i didn't got the 4.7.7 and i got the 4.8.0-dev ...

Don't know why....

Any easy way to check the version from cli ?

Third server report:

Maybe to busy as it is all around the news and everyone try to upgrade?

But all servers was updated and working even with that errors

Thank you

 

Is there a guide on ssh commands for mysql?

Thanks,
Itworx4me

 

i just got this:

It works after that but you may want to find that and fix it

 

Just for the record.
For the love of god I was trying to figure out why I couldn't access phpmyadmin after installing it via this addon.

I think I figured it out, not sure if this is correct but just in case I write it down for ppl who are in a similar position.

So after you have a fresh install of centmin, don't forget to delete the demodomain.com.conf BEFORE you install phpmyadmin.

So, make a fresh install of centmin, make a vhost file for your domain (#2 option in ./centmin.sh), then delete demodomain.com.conf file located in usr/local/nginx/conf/conf.d (also delete the demodomain in /home/nginx/domains) THEN install phpmyadmin. I deleted demodomain for 3-4 tries after the installation of phpmyadmin, and for the love of god couldn't understand why I can't access it. I guess the conf file of phpmyadmin has a problem seeing 2 conf files, but don't know, maybe I am wrong. But in case I write it down for all ppl.

 

I read step 1 and step 2 multiple times already. It made me crazy, couldn't figure out why I have no access.

I set my DNS entry yesterday, with no changes. Still after a day, even though I could reach to my domain and ip normally, which means my dns entry was correct, I could not access phpmyadmin at all. No error page, nothing. For this purpose alone I did multiple fresh installs. And now after deleting demodomain.com.conf before phpmyadmin installation, it worked. Maybe it is something else, but meanwhile I didn't change my DNS entries at all. Anyway, I'm happy that it works now, and for future reference I wanted to share it with all people.

 

I'm having this same issue, but I can't continue.

Main hostname is setup properly.

Any ideas @eva2000?

 

Sorry, didn't see this till now

myphpadmin error

 

Code:

[18:53][root@subdomain.domain.com ~]# SSLHNAME=$(uname -n)
[18:53][root@subdomain.domain.com ~]# echo $SSLHNAME
subdomain.domain.com
[18:53][root@subdomain.domain.com ~]# grep -rw server_name /usr/local/nginx/conf/conf.d/ | grep -w "$SSLHNAME"
/usr/local/nginx/conf/conf.d/subdomain.domain.com.ssl.conf:#       server_name subdomain.domain.com www.subdomain.domain.com;
/usr/local/nginx/conf/conf.d/subdomain.domain.com.ssl.conf:#       return 302 https://$server_name$request_uri;
/usr/local/nginx/conf/conf.d/subdomain.domain.com.ssl.conf:  server_name subdomain.domain.com www.subdomain.domain.com;
/usr/local/nginx/conf/conf.d/subdomain.domain.com.conf:#            server_name subdomain.domain.com;
/usr/local/nginx/conf/conf.d/subdomain.domain.com.conf:  server_name subdomain.domain.com www.subdomain.domain.com;
/usr/local/nginx/conf/conf.d/virtual.conf:            server_name subdomain.domain.com;
/usr/local/nginx/conf/conf.d/subdomain.domain.com.ssl.conf.old:#       server_name subdomain.domain.com www.subdomain.domain.com;
/usr/local/nginx/conf/conf.d/subdomain.domain.com.ssl.conf.old:#       return 302 https://$server_name$request_uri;
/usr/local/nginx/conf/conf.d/subdomain.domain.com.ssl.conf.old:  server_name subdomain.domain.com www.subdomain.domain.com;
[18:53][root@subdomain.domain.com ~]#

 

Ah, thank you!