PhpMyAdmin

To Be or Not To Be

There has been an ongoing debate for several years now whether we should be embedding phpMyAdmin into OpenEMR. Those against phpMyAdmin cite security concerns while those for phpMyAdmin cite practical concerns. At this point, phpMyAdmin remains embedded in OpenEMR for now with the caveat that one can consider removal of the phpmyadmin directory (ie. manually remove phpmyadmin) if a user has any security concerns. This is an ongoing debate, so not sure what the community will decide for future OpenEMR versions; most recent forum thread discussing this issue can be found found here.

For OpenEMR versions 4.1.3 and above

Integration into OpenEMR

Embedded phpMyAdmin was upgraded to 4.2.5. This included:

• Removal of previous phpmyadmin version:

• https://github.com/openemr/openemr/commit/7bd0904c15f2ce8e2dfbebe364a61dd0a394e6ed

• Addition of stock phpMyAdmin 4.2.5 (All Language version).

• https://github.com/openemr/openemr/commit/cfc1ddf0544bc98af242756b8b5c74dc19e7b51f

• Integration for phpMyAdmin 4.2.5 into OpenEMR

• https://github.com/openemr/openemr/commit/4ed7c7b5763538fab5090d3145194cfdd6120752

For OpenEMR version 4.1.2

Integration into OpenEMR

Embedded phpMyAdmin was upgraded to 4.0.4. This included:

• Removal of previous phpmyadmin version:

• http://github.com/openemr/openemr/commit/807e0ebfc4d1d9108cef338ba29c4e2ded90076e

• Addition of stock phpMyAdmin 4.0.4 (All Language version).

• http://github.com/openemr/openemr/commit/bcac748a7611fcdff0be8d0c76e3249760987a0e

• Integration for phpMyAdmin 4.0.4 into OpenEMR

• http://github.com/openemr/openemr/commit/79b041ab835d558a73e29761cd7e166ea426ce0d

Security Patches

• Goal is to keep this version updated by phpmyadmin security patches released here:

• http://www.phpmyadmin.net/home_page/security/

• First security patch:

• http://www.phpmyadmin.net/home_page/security/PMASA-2013-7.php (4.0.4.1 patch) (COMPLETED for 4.1.2)

• FROM (phpmyadmin codebase):

• http://github.com/phpmyadmin/phpmyadmin/commit/012464268420e53a9cd81cbb4a43988d70393c36.patch

• TO (openemr codebase):

• http://github.com/openemr/openemr/commit/23ae06ee46d2c05377b70c9510c1e68b36644aef

For OpenEMR versions 3.1.0 - 4.1.1

The phpMyAdmin version (chose 2.x branch to ensure compatibility with php4/mysql4) has been upgraded and migrated to openemr/phpmyadmin. The customizations involved to embed phpMyAdmin involved creating a custom openemr/phpmyadmin/config.inc.php file and modifying several files (openemr/phpmyadmin/libraries/session.inc.php and openemr/phpmyadmin/libraries/common.inc.php) to ensure the sessions of phpMyAdmin and OpenEMR do not conflict. Note that the session name in openemr/interface/globals.php and openemr/phpmyadmin/libraries/session.inc.php need to be identical (this has been documented in the globals.php file for users whom want to change the session names). phpMyAdmin was imported into the cvs code with PHPMYADMIN tags to allow simple upgrading in the cvs to new phpMyAdmin versions in future via cvs import and merge.

• Upgraded OpenEMR 4.0 to phpMyAdmin 2.11.10 via cvs import command (very easy) (4/22/2010)

For OpenEMR versions 3.0.1 and below

The embedded phpMyAdmin can be found at openemr/interface/main/myadmin.