Menu

#2952 (ok 3.2.5) ShowServerInfo should hide all server info

3.2.4
fixed
1
2013-06-11
2009-12-07
No

I'm quite sure I've asked about this before at some point.. but when downloading 3.2.4 and installing it, I see it's still there.

How do we disable:
Status
Variables
Charsets
Engines
Processes

to be available from the Main frame top?

Also, how do we disable disclosure of Webserver and Database server information? Both ShowServerInfo and ShowPhpInfo is set to FALSE. ShowStats is also false.

Also, how do we disable a link to phpMyAdmin documentation? Something that very few users actually need/use/want.

Discussion

  • Marc Delisle

    Marc Delisle - 2009-12-07
    • labels: 509104 --> 509109
    • milestone: 1000680 -->
     
  • Marc Delisle

    Marc Delisle - 2009-12-07

    Please. IMO this is not a bug. You want new features and maybe asked them in the features tracker.

    Moved to support.

     
  • Joaquim Homrighausen

    I would say this is a bug; I have explicitly said that I don't want Serverinfo to be displayed, yet the user can still see which version of Apache is being used, which version of the MySQL Client protocol is being used, etc. As it is now, I've simply removed those lines from main.php

     
  • Marc Delisle

    Marc Delisle - 2009-12-07

    Ok. ShowServerInfo is not correctly documented. In libraries/config.default.php it's stated that its purpose is about MySQL server info, not Apache, but this does not reflect in Documentation.html.
    The level of "details" about server information is open to discussion, however. Setting this to "false" does remove some details from the main page.

     
  • Marc Delisle

    Marc Delisle - 2009-12-07
    • labels: 509109 --> Security / Restrictions
     
  • Marc Delisle

    Marc Delisle - 2009-12-08

    I guess you would also like that this parameter, when set to false, remove the top-menu "Server: xxx" ?

     
  • Marc Delisle

    Marc Delisle - 2009-12-09
    • assigned_to: nobody --> lem9
    • summary: Unnecessary Information disclosure --> ShowServerInfo should hide all server info
     
  • Marc Delisle

    Marc Delisle - 2009-12-09
    • milestone: --> 3.2.4
    • priority: 5 --> 1
    • summary: ShowServerInfo should hide all server info --> (ok 3.2.5) ShowServerInfo should hide all server info
    • status: open --> open-fixed
     
  • Marc Delisle

    Marc Delisle - 2009-12-09

    ShowServerInfo problem fixed for 3.2.5. Your other feature requests are still in the features tracker.

     
  • Marc Delisle

    Marc Delisle - 2010-01-10
    • status: open-fixed --> closed-fixed
     
  • Michal Čihař

    Michal Čihař - 2013-06-11
    • Status: closed-fixed --> fixed
     
MongoDB Logo MongoDB