Page 1 of 1

LAMPP 1.8.1 fix for phpMyAdmin + 'new Security Concept'

PostPosted: 05. November 2012 22:18
by JonB
Issue 403 Forbidden Error on phpMyAdmin

Courtesy of Altrea:
viewtopic.php?f=3&t=50969

Code: Select all
#
# New XAMPP security concept
#
<LocationMatch "^/(?i:(?:xampp|security|licenses|phpmyadmin|webalizer|server-status|server-info))">
   <RequireAny>
    Require ip ::1 127.0.0.0/8 \
      fc00::/7 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 \
      fe80::/10 169.254.0.0/16
   </RequireAny>
   ErrorDocument 403 /error/XAMPP_FORBIDDEN.html.var
</LocationMatch>


Good Luck to all
8)

Re: LAMPP 1.8.1 fix for phpMyAdmin + 'new Security Concept'

PostPosted: 07. November 2012 01:24
by kenjis
<RequireAny> and </RequireAny> are not necessary.

Code: Select all
--- httpd-xampp.conf.orig   2012-05-15 18:22:41.000000000 +0900
+++ httpd-xampp.conf   2012-11-07 09:16:38.000000000 +0900
@@ -57,9 +57,7 @@
 # New XAMPP security concept
 #
 <LocationMatch "^/(?i:(?:xampp|security|licenses|phpmyadmin|webalizer|server-status|server-info))">
-   Order deny,allow
-   Deny from all
-   Allow from ::1 127.0.0.0/8 \
+   Require ip ::1 127.0.0.0/8 \
       fc00::/7 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 \
       fe80::/10 169.254.0.0/16

Re: LAMPP 1.8.1 fix for phpMyAdmin + 'new Security Concept'

PostPosted: 07. November 2012 04:58
by Altrea
Hi kenjis,

kenjis wrote:<RequireAny> and </RequireAny> are not necessary.

Thank you for the feedback.
You are correct. The <RequireAny> Container is not necessary. But it has no disadvantages anyways and prepares the whole block for adding another authentification method like authnz_ldap, auth_digest or something like that.
Thats the only reason i added it. You can leave it off if you want to :)

best wishes,
Altrea

Re: LAMPP 1.8.1 fix for phpMyAdmin + 'new Security Concept'

PostPosted: 10. February 2013 06:37
by navonn
Hi
I don't undertand why I don't succeed to access phpmyadmin. I have tried many times and no success ...
The Xampp version is 1.8.1, and I have Linux Ubuntu 12.10, on Intel Core Duo 2 CPU 32 bits.
I have done all the modifications described in this forum on httpd-xampp.conf and I get nothing but Error 403 ... I just need to install Xampp as a local server on a stand alone machine (for testing). In my previous version of Xampp (on Ubuntu 12.04) it worked pretty well.
Is there any other file to modify ? Is there a modification of privileges that I should do ?
Thank you very much for your help
Navonn

Re: LAMPP 1.8.1 fix for phpMyAdmin + 'new Security Concept'

PostPosted: 24. May 2013 15:04
by peterau
Hey navonn, try updating to the latest versions first when troubleshooting to see if this does the trick, oftentimes it does for me! If not then it 'may' be a bug, but it might not, when are you getting the 403 error exactly? Is there any other info attached? I always just leave the requierany container off :)