<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0">
<channel>
<title><![CDATA[向东博客 专注WEB应用 构架之美 --- 构架之美，在于尽态极妍 | 应用之美，在于药到病除]]></title> 
<link>http://www.jackxiang.com/index.php</link> 
<description><![CDATA[赢在IT，Playin' with IT,Focus on Killer Application,Marketing Meets Technology.]]></description> 
<language>zh-cn</language> 
<copyright><![CDATA[向东博客 专注WEB应用 构架之美 --- 构架之美，在于尽态极妍 | 应用之美，在于药到病除]]></copyright>
<item>
<link>http://www.jackxiang.com/post//</link>
<title><![CDATA[[实践OK]简单实现限定phpmyadmin访问ip的方法,phpadmin因PHP的session目录及自身目录权限引发错误解决。]]></title> 
<author>jack &lt;xdy108@126.com&gt;</author>
<category><![CDATA[Php/Js/Shell/Go]]></category>
<pubDate>Fri, 16 Oct 2015 06:27:21 +0000</pubDate> 
<guid>http://www.jackxiang.com/post//</guid> 
<description>
<![CDATA[ 
	背景：在外面上面放一个phpmyadmin的发现阿里的云盾发现有人居然来试着访问，网上不安全。<br/>攻击IP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;攻击时间&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;攻击URL&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;攻击类型&nbsp;&nbsp;处理结果<br/>199.191.57.182&nbsp;&nbsp;2015-10-16 05:29:33&nbsp;&nbsp;101.20*.1*.**/phpmyadmin/scripts/setup.php Match1:/phpmyadmin/scripts/setup.php&nbsp;&nbsp;其他&nbsp;&nbsp;已拦截<br/>——————————————————————————————————————————————————————————————————————<br/>修改：config.inc.php<br/>在第一行加入<br/>$ip_prefix = &#039;192.168.121.&#039;; <br/>if (substr($_SERVER[&#039;REMOTE_ADDR&#039;], 0, strlen($ip_prefix)) != $ip_prefix ) die(&#039;illegal access error&#039;);<br/>ip可以设置成你自己电脑的ip。如果是内网建议直接设置成自己的ip地址取代ip地址段。这样的话可以防止其它用户在内网中访问。如果是公网ip限制，直接使用即可。<br/>只是简单的限定，没有太大要求只是暂时限定，可以使用这种方式。临时性的限制用户去访问。<br/><br/><textarea name="code" class="php" rows="15" cols="100">
$ip_prefix = &#039;202.108.**.**&#039;; //202.108.**.**
if (substr($_SERVER[&#039;REMOTE_ADDR&#039;], 0, strlen($ip_prefix)) != $ip_prefix ) die(&#039;IP:&#039;.$_SERVER[&#039;REMOTE_ADDR&#039;].&#039;&nbsp;&nbsp;forbidden,illegal access error&#039;);
$ip_prefix = &#039;114.243.**.**&#039;; //202.106.195.68 xizuo adsl
if (substr($_SERVER[&#039;REMOTE_ADDR&#039;], 0, strlen($ip_prefix)) != $ip_prefix ) die(&#039;IP:&#039;.$_SERVER[&#039;REMOTE_ADDR&#039;].&#039;&nbsp;&nbsp;forbidden,illegal access error&#039;);
</textarea><br/><br/>当然，也可以用foreach写成一个数组来处理..........<br/><textarea name="code" class="php" rows="15" cols="100">
&lt;?php
$remoteAddr = $_SERVER[&#039;REMOTE_ADDR&#039;];
$ip_prefix_arr = array(&#039;202.108.**.**&#039;,&#039;114.243.**.**&#039;); //202.108.**.**&nbsp;&nbsp;114.243.**.**

if (!in_array($remoteAddr,$ip_prefix_arr))
&#123;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;die(&#039;IP:&#039;.$remoteAddr.&#039;&nbsp;&nbsp;forbidden,illegal access error,please contact administrator&#039;);
&#125;

?&gt;
</textarea><br/>摘自：http://www.jb51.net/article/34509.htm<br/><br/><br/><br/>phpMyAdmin 因PHP的session目录及自身目录权限引发错误解决：<br/>问题一：phpMyAdmin -Cannot start session without errors, please check errors given in your PHP and/or webserver log file and configure your PHP installation properly.<br/><textarea name="code" class="php" rows="15" cols="100">
vi /usr/local/php/etc/php.ini
session.save_path=/data/session
</textarea><br/><textarea name="code" class="php" rows="15" cols="100">
chown -R www:www /data/session
chmod 755 /data/session
</textarea><br/><br/>问题：打开phpmyadmin出现如下错误：Cannot start session without errors, please check errors given in your PHP and/or webserver log file and configure your PHP installation properly.<br/>解决办法如下：<br/>vim /etc/php5/apache2/php.ini<br/>查找session.save_path ，将session.save_path=/var/lib/php5这一句的注释符号去掉。<br/>如还不能正常工作，将session.auto_start的值改为1（启动），默认是0（禁用）<br/>这个错误一般是由于session文件的存储路径不可写造成的，在linux下一般是路径的权限问题。在windows下面session.save_path一定要设置到一个可以读写的路径，如 D:/tmp 等。<br/>摘自：http://blog.sina.com.cn/s/blog_62cd41130100uhpv.html<br/>=====================================================================================<br/>问题二：phpmyadmin错误Wrong permissions on configuration file, should not be world writable!<br/><textarea name="code" class="php" rows="15" cols="100">
chown -R www.www phpmyadmin
chmod -R 777 phpmyadmin/&nbsp;&nbsp;实践证明：777这样都不行报错依旧，得：755才Ok。
chmod -R 755 phpmyadmin/ 
</textarea><br/><br/>登录phpmyadmin,发现提示Wrong permissions on configuration file, should not be world writable!，提示配置文件必须不可写，这里改成755就OK了.<br/>用以下命令 chmod -R 755 /home/wwwroot/phpmyadmin <br/>摘自：http://www.111cn.net/phper/31/59722.htm<br/>
]]>
</description>
</item><item>
<link>http://www.jackxiang.com/post//#blogcomment</link>
<title><![CDATA[[评论] [实践OK]简单实现限定phpmyadmin访问ip的方法,phpadmin因PHP的session目录及自身目录权限引发错误解决。]]></title> 
<author> &lt;user@domain.com&gt;</author>
<category><![CDATA[评论]]></category>
<pubDate>Thu, 01 Jan 1970 00:00:00 +0000</pubDate> 
<guid>http://www.jackxiang.com/post//#blogcomment</guid> 
<description>
<![CDATA[ 
	
]]>
</description>
</item>
</channel>
</rss>