diff --git a/config.sample.inc.php b/config.sample.inc.php index 5eede6dd90..48dfdfdefe 100644 --- a/config.sample.inc.php +++ b/config.sample.inc.php @@ -148,6 +148,13 @@ $cfg['SaveDir'] = ''; */ //$cfg['SendErrorReports'] = 'always'; +/** + * 'URLQueryEncryption' defines whether phpMyAdmin will encrypt sensitive data from the URL query string. + * 'URLQueryEncryptionSecretKey' is a 32 bytes long secret key used to encrypt/decrypt the URL query string. + */ +//$cfg['URLQueryEncryption'] = true; +//$cfg['URLQueryEncryptionSecretKey'] = ''; + /** * You can find more configuration options in the documentation * in the doc/ folder or at . diff --git a/doc/config.rst b/doc/config.rst index e2e7eefb01..968145bc2f 100644 --- a/doc/config.rst +++ b/doc/config.rst @@ -1739,12 +1739,12 @@ Generic settings .. config:option:: $cfg['URLQueryEncryption'] :type: boolean - :default: true + :default: false .. versionadded:: 4.9.8 Define whether phpMyAdmin will encrypt sensitive data (like database name - and table name) from the URL query string. Default is to encrypt the URL + and table name) from the URL query string. Default is to not encrypt the URL query string. .. config:option:: $cfg['URLQueryEncryptionSecretKey'] diff --git a/libraries/config.default.php b/libraries/config.default.php index b81981ba45..649c2d73c6 100644 --- a/libraries/config.default.php +++ b/libraries/config.default.php @@ -822,7 +822,7 @@ $cfg['IgnoreMultiSubmitErrors'] = false; * * @global bool $cfg['URLQueryEncryption'] */ -$cfg['URLQueryEncryption'] = true; +$cfg['URLQueryEncryption'] = false; /** * A secret key used to encrypt/decrypt the URL query string. Should be 32 bytes long.