Getting 500 Internal Server Error when using phpMyAdmin ?

Need help installing PHP, configuring a script, or configuring a server? Then come on in and post your questions! We'll try to help the best we can!

Moderator: General Moderators

Post Reply
User avatar
anjanesh
DevNet Resident
Posts: 1679
Joined: Sat Dec 06, 2003 9:52 pm
Location: Mumbai, India

Getting 500 Internal Server Error when using phpMyAdmin ?

Post by anjanesh »

Was abt to post the q in the form when I found the solution - I wanted to post this here anyway as I found this very hard to find as this doesnt seem to be all that common - but there are some Apache servers configured like this.

On shared host, I've uploaded phpMyAdmin and login works (cookie based) and whatever links are there works. But each time I click a button (POSTing a FORM like Next Page after clicking Browse) it gives a 500 (Internal Server Error) on the right-frame.

Checking the logs I found

Code: Select all

[Tue Jun 13 06:18:41 2006] [error] [client xxx.xxx.xxx.xx] mod_security: Access denied with code 500. Pattern match "(insert[[:space:]]+into.+values|select.+from|bulk[[:space:]]+insert|union.+select)" at POST_PAYLOAD [id "300016"] [rev "1"] [msg "Generic SQL injection protection"] [severity "2"] [hostname "mydomain.com"] [uri "/phpMyAdmin281/sql.php"]
If you dont get the exact error above, you'll defintely get something of the form :

Code: Select all

--- 
Access denied with code 500. Pattern match.... 
Generic SQL injection protection 
---
Theres just one line you need to add to your .htaccess file in phpMyAdmin

Code: Select all

SecFilterInheritance Off
http://article.gmane.org/gmane.comp.apa ... .user/1544
User avatar
JayBird
Admin
Posts: 4524
Joined: Wed Aug 13, 2003 7:02 am
Location: York, UK
Contact:

Post by JayBird »

Cool, thanks for the heads up
Post Reply