From 61a05ac806b8c5badc2f885a3ccc152a9e0bf464 Mon Sep 17 00:00:00 2001 From: Marc Delisle Date: Wed, 3 Sep 2008 12:04:16 +0000 Subject: [PATCH] second draft :) --- Documentation.html | 26 ++++++++++++++------------ 1 file changed, 14 insertions(+), 12 deletions(-) diff --git a/Documentation.html b/Documentation.html index f3cbf7f09d..02baf93ebf 100644 --- a/Documentation.html +++ b/Documentation.html @@ -1772,24 +1772,26 @@ $cfg['TrustedProxies'] = This is needed for native MS Excel export, see FAQ - 6.23 and for workaround limitations of open_basedir for uploaded + 6.23 and to work around limitations of + open_basedir for uploaded files, see FAQ 1.11.

- If you have server configured with open_basedir, you need to create - temporary directory in some directory, where it can be acessed by web - server. However for security reasons, best is also to have it outside - tree published by webserver. If you can not avoid having this - directory published by webserver, place at least empty - index.html file there, so that directory listing is not + If the directory where phpMyAdmin is installed is subject to an + open_basedir restriction, you need to create a + temporary directory in some directory accessible by the web + server. However for security reasons, this directory should be outside + the tree published by webserver. If you cannot avoid having this + directory published by webserver, place at least an empty + index.html file there, so that directory listing is not possible.

- This directory should have as strict permissions as possible as only - user required to access to this directory is the one who runs - webserver. If you have root privileges, simple make this user owner of - this folder and make it accessible only by him: + This directory should have as strict permissions as possible as the only + user required to access this directory is the one who runs the + webserver. If you have root privileges, simply make this user owner of + this directory and make it accessible only by it:

@@ -1797,7 +1799,7 @@ chown www-data:www-data tmp
 chmod 700 tmp
 
- If you can not change owner of the directory, you can achieve similar + If you cannot change owner of the directory, you can achieve a similar setup using ACL:
-- 
2.11.4.GIT