Page 1 of 1

Getting 500 Internal Server Error when using phpMyAdmin ?

Posted: Tue Jun 13, 2006 10:38 am
by anjanesh
Was abt to post the q in the form when I found the solution - I wanted to post this here anyway as I found this very hard to find as this doesnt seem to be all that common - but there are some Apache servers configured like this.

On shared host, I've uploaded phpMyAdmin and login works (cookie based) and whatever links are there works. But each time I click a button (POSTing a FORM like Next Page after clicking Browse) it gives a 500 (Internal Server Error) on the right-frame.

Checking the logs I found

Code: Select all

[Tue Jun 13 06:18:41 2006] [error] [client xxx.xxx.xxx.xx] mod_security: Access denied with code 500. Pattern match "(insert[[:space:]]+into.+values|select.+from|bulk[[:space:]]+insert|union.+select)" at POST_PAYLOAD [id "300016"] [rev "1"] [msg "Generic SQL injection protection"] [severity "2"] [hostname "mydomain.com"] [uri "/phpMyAdmin281/sql.php"]
If you dont get the exact error above, you'll defintely get something of the form :

Code: Select all

--- 
Access denied with code 500. Pattern match.... 
Generic SQL injection protection 
---
Theres just one line you need to add to your .htaccess file in phpMyAdmin

Code: Select all

SecFilterInheritance Off
http://article.gmane.org/gmane.comp.apa ... .user/1544

Posted: Tue Jun 13, 2006 10:48 am
by JayBird
Cool, thanks for the heads up