Posted by "Richard Lynch" on 11/14/05 21:51

On Mon, November 14, 2005 1:15 pm, russbucket wrote:
> On Monday 14 November 2005 10:47, Curt Zirzow wrote:
>> On Mon, Nov 14, 2005 at 10:06:17AM -0800, russbucket wrote:
>> > Trying to get apache2, php5 and mysql running. get the following
>> error
>> > when opening phpMyAdmin. Can someone explain what it means. There
>> is an
>> > include path in php.ini.
>>
>> I think you forgot to include the error message.
>>
>> curt.
>> --
> Your right, hand got ahead of my brain, Heres the messages when using
> http/localhost/phpMyAdmin/
>
> phpMyAdmin - Error
> phpMyAdmin was unable to read your configuration file!
> This might happen if PHP finds a parse error in it or PHP cannot find
> the
> file.
> Please call the configuration file directly using the link below and
> read the
> PHP error message(s) that you receive. In most cases a quote or a
> semicolon
> is missing somewhere.
> If you receive a blank page, everything is fine.
>
> config.inc.php
>
> Clicking on the config.inc.php gives following error.
> Warning: Unknown: failed to open stream: Permission denied in Unknown
> on line
> 0
>
> Warning: Unknown: Failed opening
> '/srv/www/htdocs/phpMyAdmin/config.inc.php'
> for inclusion (include_path='.:') in Unknown on line 0
>
> I've checked and rechecked the configurations files, they look
> correct.

The file contents are fine (maybe) but PHP can't even *READ* the file
because it's set up as un-readable by the PHP user.

You need to find out the permissions on the file (config.inc.php)

In a shell prompt on the server you can do:
ls -als config.inc.php
The output will have something not unlike:
7 -rw-rw-r-- 1 russbucket nwi_group ... config.inc.php

But I'll bet a dollar *YOUR* file doesn't have the last 'r' letter
there, and just has '-' instead:
-rw-rw----

You need to change that:
chmod 554 config.inc.php

WARNING:
On a shared server, this is exposing your database password to
everybody else on that shared server. You may not have any other
option, however.

To mitigate this risk, you may want to do several things, after you
get phpMyAdmin working.

1. Move the file out of your web tree, so *ONLY* users on the shared
server could possibly read it, not the whole friggin' world.

2. Move it to a directory that denies listings by other users, so they
can't stumble across it. (This may make it unreadable by PHP, though,
depending on things I've never fully understood, so then don't do
that...)

More involved methods of keeping the password accessible to PHP and
not everybody else with a login can be found here:
http://phpsec.org

--
Like Music?
http://l-i-e.com/artists.htm

[Back to original message]