PhpMyAdmin

For versions 4.1.2 and above

Integration into OpenEMR

Embedded phpMyAdmin was upgraded to 4.0.4. This included:

• Removal of previous phpmyadmin version:

• http://github.com/openemr/openemr/commit/807e0ebfc4d1d9108cef338ba29c4e2ded90076e

• Addition of stock phpMyAdmin 4.0.4 (All Language version).

• http://github.com/openemr/openemr/commit/bcac748a7611fcdff0be8d0c76e3249760987a0e

• Integration fo phpMyAdmin 4.0.4 into OpenEMR

• http://github.com/openemr/openemr/commit/79b041ab835d558a73e29761cd7e166ea426ce0d

Security Patches

Goal is to keep this version updated by phpmyadmin security patches released here:

• http://www.phpmyadmin.net/home_page/security/

First security patch will be this (In Progress):

• http://www.phpmyadmin.net/home_page/security/PMASA-2013-7.php (4.0.4.1 patch)

• WILL PLACE THE GITHUB OPENEMR COMMIT HERE AFTER BROUGHT INTO OPENEMR CODEBASE HERE.

To Be or Not To Be

There has been an ongoing debate for several years now whether we should be embedding phpMyAdmin into OpenEMR. Those against phpMyAdmin cite security concerns while those for phpMyAdmin cite practical concerns. Because of the practical concerns, phpMyAdmin will remain embedded in OpenEMR for now (as of version 4.1.2), with the caveat that one can consider removal of the phpmyadmin directory (ie. manually remove phpmyadmin) if a user has any security concerns. This is an ongoing debate, so not sure what the community will decide for future OpenEMR versions.

For versions 3.1.0 - 4.1.1

The phpMyAdmin version (chose 2.x branch to ensure compatibility with php4/mysql4) has been upgraded and migrated to openemr/phpmyadmin. The customizations involved to embed phpMyAdmin involved creating a custom openemr/phpmyadmin/config.inc.php file and modifying several files (openemr/phpmyadmin/libraries/session.inc.php and openemr/phpmyadmin/libraries/common.inc.php) to ensure the sessions of phpMyAdmin and OpenEMR do not conflict. Note that the session name in openemr/interface/globals.php and openemr/phpmyadmin/libraries/session.inc.php need to be identical (this has been documented in the globals.php file for users whom want to change the session names). phpMyAdmin was imported into the cvs code with PHPMYADMIN tags to allow simple upgrading in the cvs to new phpMyAdmin versions in future via cvs import and merge.

• Upgraded OpenEMR 4.0 to phpMyAdmin 2.11.10 via cvs import command (very easy) (4/22/2010)

For versions 3.0.1 and below

The embedded phpMyAdmin can be found at openemr/interface/main/myadmin.