#1087 Avoid revealing MySQL version

Next_minor_version
invalid
nobody
5
2013-06-11
2008-04-26
David
No

Is it possible to add an option
in the configuration file
priori / etc / phpmyadmin / config.inc.php
so does phpMyAdmin
no information version
to any user MySQL,
the aim is to make the painful spot
for a possible crack
and sleep in peace for users
if a curious asking the question.

homepage (phpmyadmin / index.php)
Welcome to phpMyAdmin [version] does not show [version]

I am authenticated page (phpmyadmin / index.php? xxx & lang = token = xxx)
Server Version: [version] replace [version] mysql
Version of protocol: to leave useful?
phpMyAdmin - [version] at the top, right column, not to show [version]
Version of MySQL client: [version] to replace it with mysql

page Show variables server (phpmyadmin / index.php? xxx & lang = token = xxx)
version [version] to replace it with mysql
version comment [version] does not show

Discussion

  • Olaf van der Spek

    Logged In: YES
    user_id=30264
    Originator: NO

    Why? You do run the latest version of MySQL, don't you?

     
  • Marc Delisle

    Marc Delisle - 2008-06-26

    Logged In: YES
    user_id=210714
    Originator: NO

    Anyone could type
    SELECT VERSION();

     
  • Marc Delisle

    Marc Delisle - 2008-06-26
    • summary: [phpmyadmin][which list] --> Avoid revealing MySQL version
    • status: open --> closed-rejected
     
  • Michal Čihař

    Michal Čihař - 2013-06-11
    • Status: closed-rejected --> invalid