[Phpmyadmin-devel] how to allow access to page without token

Michal Čihař michal at cihar.com
Thu Oct 3 15:25:07 CEST 2013


Hi

Dne Thu, 3 Oct 2013 14:49:35 +0200
Mohamed Ashraf <mohamed.ashraf.213 at gmail.com> napsal(a):

> I want to allow access to the scripts page without a token and at the same
> time I want to check the current config settings. 

Maybe it's better to describe what you want to actually achieve.

> The current method I use
> to check config settings is by including common.inc.php to the script but
> the problem is that common.inc.php removes all GET params if the token is
> incorrect.

That's exactly purpose of token. In case you're doing the request from
phpMyAdmin the token is available in session, so including it should
not be hard...

-- 
	Michal Čihař | http://cihar.com | http://blog.cihar.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.phpmyadmin.net/pipermail/developers/attachments/20131003/6974086a/attachment.sig>


More information about the Developers mailing list