gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Show warning for default control user/pass usage

Browse Source 
Signed-Off-By: Lakshay arora <arora.lakshya123@gmail.com>
This commit is contained in:
Lakshay arora 2018-07-01 03:42:28 +05:30
parent a5c14e42d1
commit c87579ec62
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
index.php
View File

@ -552,6 +552,20 @@ if ($GLOBALS['cfg']['LoginCookieStore'] != 0
);
}
/**
* Warning if using the default MySQL controluser account
*/
if ($server != 0
&& isset($GLOBALS['cfg']['Server']['controluser']) && $GLOBALS['cfg']['Server']['controluser'] == 'pma'
&& isset($GLOBALS['cfg']['Server']['controlpass']) && $GLOBALS['cfg']['Server']['controlpass'] == 'pmapass'
) {
trigger_error(
__('Your MySQL server is running with default controluser and password, and is open to intrusion, you really should fix this security hole by changing the password for controluser \'pma\'.'),
E_USER_WARNING
);
}
/**
* Check if user does not have defined blowfish secret and it is being used.
*/