PhpMyAdmin

From OpenEMR Project Wiki

To Be or Not To Be

There has been an ongoing debate for several years now whether we should be embedding phpMyAdmin into OpenEMR. Those against phpMyAdmin cite security concerns while those for phpMyAdmin cite practical concerns. At this point, phpMyAdmin remains embedded in OpenEMR for now with the caveat that one can consider removal of the phpmyadmin directory (ie. manually remove phpmyadmin) if a user has any security concerns. This is an ongoing debate, so not sure what the community will decide for future OpenEMR versions; most recent forum thread discussing this issue can be found here.

For OpenEMR versions 4.3.1 and above

Integration into OpenEMR

Embedded phpMyAdmin was upgraded to 4.5.4.1(note this version requires PHP5.5+). This included:
  • Removal of previous phpmyadmin version:
  • Addition of stock phpMyAdmin 4.5.4.1 (All Language version).
  • Integration for phpMyAdmin 4.5.4.1 into OpenEMR
  • Another minor integration commit

For OpenEMR versions 4.1.3 through 4.3.0

Integration into OpenEMR

Embedded phpMyAdmin was upgraded to 4.2.5. This included:
  • Removal of previous phpmyadmin version:
  • Addition of stock phpMyAdmin 4.2.5 (All Language version).
  • Integration for phpMyAdmin 4.2.5 into OpenEMR

For OpenEMR version 4.1.2

Integration into OpenEMR

Embedded phpMyAdmin was upgraded to 4.0.4. This included:
  • Removal of previous phpmyadmin version:
  • Addition of stock phpMyAdmin 4.0.4 (All Language version).
  • Integration for phpMyAdmin 4.0.4 into OpenEMR

Security Patches

  • Goal is to keep this version updated by phpmyadmin security patches released here:
  • First security patch:
  • FROM (phpmyadmin codebase):
  • TO (openemr codebase):

For OpenEMR versions 3.1.0 - 4.1.1

The phpMyAdmin version (chose 2.x branch to ensure compatibility with php4/mysql4) has been upgraded and migrated to openemr/phpmyadmin. The customizations involved to embed phpMyAdmin involved creating a custom openemr/phpmyadmin/config.inc.php file and modifying several files (openemr/phpmyadmin/libraries/session.inc.php and openemr/phpmyadmin/libraries/common.inc.php) to ensure the sessions of phpMyAdmin and OpenEMR do not conflict. Note that the session name in openemr/interface/globals.php and openemr/phpmyadmin/libraries/session.inc.php need to be identical (this has been documented in the globals.php file for users whom want to change the session names). phpMyAdmin was imported into the cvs code with PHPMYADMIN tags to allow simple upgrading in the cvs to new phpMyAdmin versions in future via cvs import and merge.
  • Upgraded OpenEMR 4.0 to phpMyAdmin 2.11.10 via cvs import command (very easy) (4/22/2010)

For OpenEMR versions 3.0.1 and below

The embedded phpMyAdmin can be found at openemr/interface/main/myadmin.