Difference between revisions of "PhpMyAdmin"
From OpenEMR Project Wiki
Bradymiller (talk | contribs) |
Bradymiller (talk | contribs) |
||
| Line 2: | Line 2: | ||
:There has been an ongoing debate for several years now whether we should be embedding phpMyAdmin into OpenEMR. Those against phpMyAdmin cite security concerns while those for phpMyAdmin cite practical concerns. At this point, phpMyAdmin remains embedded in OpenEMR for now with the caveat that one can consider removal of the phpmyadmin directory (ie. manually remove phpmyadmin) if a user has any security concerns. This is an ongoing debate, so not sure what the community will decide for future OpenEMR versions; most recent forum thread discussing this issue can be [https://sourceforge.net/p/openemr/discussion/202506/thread/5eb111fd/ found here]. | :There has been an ongoing debate for several years now whether we should be embedding phpMyAdmin into OpenEMR. Those against phpMyAdmin cite security concerns while those for phpMyAdmin cite practical concerns. At this point, phpMyAdmin remains embedded in OpenEMR for now with the caveat that one can consider removal of the phpmyadmin directory (ie. manually remove phpmyadmin) if a user has any security concerns. This is an ongoing debate, so not sure what the community will decide for future OpenEMR versions; most recent forum thread discussing this issue can be [https://sourceforge.net/p/openemr/discussion/202506/thread/5eb111fd/ found here]. | ||
==For OpenEMR versions 4. | ==For OpenEMR versions 4.2.2 and above== | ||
===Integration into OpenEMR=== | ===Integration into OpenEMR=== | ||
:Embedded phpMyAdmin was upgraded to 4.5.4.1(note this version requires PHP5.5+). This included: | :Embedded phpMyAdmin was upgraded to 4.5.4.1(note this version requires PHP5.5+). This included: | ||
| Line 14: | Line 14: | ||
::*https://github.com/openemr/openemr/commit/72f01e030af0fe12e63076f11dcfd641950d608f | ::*https://github.com/openemr/openemr/commit/72f01e030af0fe12e63076f11dcfd641950d608f | ||
==For OpenEMR versions 4.1.3 through 4. | ==For OpenEMR versions 4.1.3 through 4.2.2== | ||
===Integration into OpenEMR=== | ===Integration into OpenEMR=== | ||
:Embedded phpMyAdmin was upgraded to 4.2.5. This included: | :Embedded phpMyAdmin was upgraded to 4.2.5. This included: | ||
Revision as of 11:20, 30 March 2017
To Be or Not To Be
- There has been an ongoing debate for several years now whether we should be embedding phpMyAdmin into OpenEMR. Those against phpMyAdmin cite security concerns while those for phpMyAdmin cite practical concerns. At this point, phpMyAdmin remains embedded in OpenEMR for now with the caveat that one can consider removal of the phpmyadmin directory (ie. manually remove phpmyadmin) if a user has any security concerns. This is an ongoing debate, so not sure what the community will decide for future OpenEMR versions; most recent forum thread discussing this issue can be found here.
For OpenEMR versions 4.2.2 and above
Integration into OpenEMR
- Embedded phpMyAdmin was upgraded to 4.5.4.1(note this version requires PHP5.5+). This included:
- Removal of previous phpmyadmin version:
- Addition of stock phpMyAdmin 4.5.4.1 (All Language version).
- Integration for phpMyAdmin 4.5.4.1 into OpenEMR
- Another minor integration commit
For OpenEMR versions 4.1.3 through 4.2.2
Integration into OpenEMR
- Embedded phpMyAdmin was upgraded to 4.2.5. This included:
- Removal of previous phpmyadmin version:
- Addition of stock phpMyAdmin 4.2.5 (All Language version).
- Integration for phpMyAdmin 4.2.5 into OpenEMR
For OpenEMR version 4.1.2
Integration into OpenEMR
- Embedded phpMyAdmin was upgraded to 4.0.4. This included:
- Removal of previous phpmyadmin version:
- Addition of stock phpMyAdmin 4.0.4 (All Language version).
- Integration for phpMyAdmin 4.0.4 into OpenEMR
Security Patches
- Goal is to keep this version updated by phpmyadmin security patches released here:
- First security patch:
- http://www.phpmyadmin.net/home_page/security/PMASA-2013-7.php (4.0.4.1 patch) (COMPLETED for 4.1.2)
- FROM (phpmyadmin codebase):
- TO (openemr codebase):
For OpenEMR versions 3.1.0 - 4.1.1
- The phpMyAdmin version (chose 2.x branch to ensure compatibility with php4/mysql4) has been upgraded and migrated to openemr/phpmyadmin. The customizations involved to embed phpMyAdmin involved creating a custom openemr/phpmyadmin/config.inc.php file and modifying several files (openemr/phpmyadmin/libraries/session.inc.php and openemr/phpmyadmin/libraries/common.inc.php) to ensure the sessions of phpMyAdmin and OpenEMR do not conflict. Note that the session name in openemr/interface/globals.php and openemr/phpmyadmin/libraries/session.inc.php need to be identical (this has been documented in the globals.php file for users whom want to change the session names). phpMyAdmin was imported into the cvs code with PHPMYADMIN tags to allow simple upgrading in the cvs to new phpMyAdmin versions in future via cvs import and merge.
- Upgraded OpenEMR 4.0 to phpMyAdmin 2.11.10 via cvs import command (very easy) (4/22/2010)
For OpenEMR versions 3.0.1 and below
- The embedded phpMyAdmin can be found at openemr/interface/main/myadmin.
