News for hackers. Stuff that matters.
Re:PhpMyAdmin Project Successfully Completes Security Audit by smaili on Tuesday June 14, 2016 @11:05AM (#11902434)
Does anyone still use this? I didn't realize this was still actively maintained.
Re:PhpMyAdmin Project Successfully Completes Security Audit by creshal on Tuesday June 14, 2016 @11:14AM (#11902491)
If you are using MySQL, and need to manually fuck around with tables for whatever reason, it's really useful and beats most other options.

For us it sees plenty of use with poorly developed legacy software (e.g. Wordpress).

Re:PhpMyAdmin Project Successfully Completes Security Audit by onion2k on Tuesday June 14, 2016 @11:20AM (#11902536)
If you need to make a manual database change then Adminer is often a better option[1].

It's doesn't have the featureset as PHPMyAdmin but it has a huge advantage in that it's a single PHP file you can upload, make the necessary changes, and then delete. If you're interested in maintaining a secure server but you don't have any better options than using a script, then it's better to upload something when you need it than trying to secure an online admin tool.

[1] https://www.adminer.org/

Re:PhpMyAdmin Project Successfully Completes Security Audit by creshal on Tuesday June 14, 2016 @11:28AM (#11902606)
> It's doesn't have the featureset as PHPMyAdmin but it has a huge advantage in that it's a single PHP file you can upload, make the necessary changes, and then delete

The days of painfully slow FTP servers are long gone where "it's one file" would count as advantage.

This leaves a massively worse UX and featureset.

(We are using adminer for postgresql databases, because there's no better alternative, and it makes me wish phpmyadmin supported postgres every time I have to use it.)

Re:PhpMyAdmin Project Successfully Completes Security Audit by ivanceras on Tuesday June 14, 2016 @11:49AM (#11902799)
Didn't postgresql community just annouced pgadmin4 lately and it seems to come with a modern webclient https://www.pgadmin.org/
Re:PhpMyAdmin Project Successfully Completes Security Audit by ZenoArrow on Tuesday June 14, 2016 @12:44PM (#11903256)
Do any of these web-based DB tools come with autocomplete? I'd say that's the feature I value most when using desktop DB tools.
Re:PhpMyAdmin Project Successfully Completes Security Audit by the_rosentotter on Tuesday June 14, 2016 @02:26PM (#11904137)
TeamPostgreSQL[1] is a pretty good web interface for Postgres. It has SQL autocompletion too, with completion for schema objects as well as SQL keywords. It is free.

[1] http://www.teampostgresql.com

Re:PhpMyAdmin Project Successfully Completes Security Audit by ZenoArrow on Tuesday June 14, 2016 @04:36PM (#11905129)
Thanks for the tip.
Re:PhpMyAdmin Project Successfully Completes Security Audit by callesgg on Tuesday June 14, 2016 @06:41PM (#11905928)
Latest version of PhpMyAdmin does, but not nearly as good as for example "Microsoft SQL Management" does for MsSQL.

My favorite feature is generally the graphical database relation view. Without it i am something like 500% less effective.

Re:PhpMyAdmin Project Successfully Completes Security Audit by onion2k on Tuesday June 14, 2016 @11:36AM (#11902686)
Having a single file isn't an advantage from a speed perspective; the advantage lies in only having to upload a file, make a change and delete the file again. There's no install, no config, etc.
Re:PhpMyAdmin Project Successfully Completes Security Audit by overcast on Tuesday June 14, 2016 @11:24AM (#11902561)
MySQL Workbench works fine though?
Re:PhpMyAdmin Project Successfully Completes Security Audit by LeonM on Tuesday June 14, 2016 @11:32AM (#11902653)
+1 for this.

The profiler (visual explain) of queries in MySQL workbench is a godsend.

Also, for general querying and table layout lookup in OSX (macOS, whatever) I recommend Sequel Pro. It has a slightly better UI when working with multiple databases (easier to switch).

Re:PhpMyAdmin Project Successfully Completes Security Audit by bowlich on Tuesday June 14, 2016 @11:37AM (#11902688)
Last time I tried it (about two years ago). It would crash all the time on Ubuntu. Went back to PHPMyAdmin.
Re:PhpMyAdmin Project Successfully Completes Security Audit by overcast on Wednesday June 15, 2016 @08:57AM (#11909010)
Mine kept crashing on Mac when viewing table information, turns out it was some old subversion plugin that integrated into the OS shell.
Re:PhpMyAdmin Project Successfully Completes Security Audit by martinczerwi on Tuesday June 14, 2016 @11:18AM (#11902516)
You might like this: https://www.dbninja.com/
Re:PhpMyAdmin Project Successfully Completes Security Audit by pinum on Tuesday June 14, 2016 @11:18AM (#11902519)
I can't think of much reason to use it over Workbench or Sequel Pro.
Re:PhpMyAdmin Project Successfully Completes Security Audit by knowaveragejoe on Tuesday June 14, 2016 @12:02PM (#11902905)
Workbench has some great features that I can't do without, but when it comes to just browsing around a DB I much prefer PhpMyAdmin's interface over it. That said I haven't really tried any of the other offerings in the space, so I expect that's a big part of my opinion.
Re:PhpMyAdmin Project Successfully Completes Security Audit by exclusiv on Tuesday June 14, 2016 @01:45PM (#11903812)
I agree with this comparison but Navicat is well worth the price. I use their data backup and synchronization (data and/or structure) all the time and it works extremely well. The "find in database" text search is a life saver too.
Re:PhpMyAdmin Project Successfully Completes Security Audit by bowlich on Tuesday June 14, 2016 @11:45AM (#11902758)
Sequel Pro - No native linux support

Workbench - Massively unstable on linux. (Although I do like the visualizing tools assuming I'm willing to put up with it crashing every hour or so).

Re:PhpMyAdmin Project Successfully Completes Security Audit by whatsamattayou on Tuesday June 14, 2016 @11:24AM (#11902564)
Some dev environments aren't local, and sometimes this is faster, especially if you have to document the changes for future updates that don't include your fancy tools.
Re:PhpMyAdmin Project Successfully Completes Security Audit by markplindsay on Tuesday June 14, 2016 @11:40AM (#11902719)
Sequel Pro's built-in SSH tunnel has worked for me in every remote development situation I've encountered.

It seems like a really bad idea to place a web-based database tool on a public-facing host when technology exists to route MySQL through SSH.

Even shared hosts support SSH these days. If yours doesn't, maybe it's time to find another shared host!

Re:PhpMyAdmin Project Successfully Completes Security Audit by smhenderson on Tuesday June 14, 2016 @01:19PM (#11903555)
It's been a while but I'm pretty sure you can do so with PHPMyAdmin.

I seem to remember installing it on my own workstation, setting up the ssh tunnel and then pointing PHPMA to localhost.

It's not my favorite tool and I've avoided it due to security concerns but I've set it up for others as described and I recall it worked fine. Like I said though it's been a while and I'm fuzzy on the details.

Re:PhpMyAdmin Project Successfully Completes Security Audit by creshal on Tuesday June 14, 2016 @11:29AM (#11902616)
Oh, if only were we using it only in dev environments…
Re:PhpMyAdmin Project Successfully Completes Security Audit by donjh on Tuesday June 14, 2016 @11:07AM (#11902443)
Countless people maintaining WordPress sites do.
Re:PhpMyAdmin Project Successfully Completes Security Audit by drzaiusapelord on Tuesday June 14, 2016 @11:41AM (#11902730)
Every Drupal dev shop we've worked this insisted this was installed on the server. Its just firewalled off/tunneled/whatever for safety.
Re:PhpMyAdmin Project Successfully Completes Security Audit by waterphone on Tuesday June 14, 2016 @11:25AM (#11902572)
Anyone using shared hosting (e.g. most people who do web development for small businesses) does.
Re:PhpMyAdmin Project Successfully Completes Security Audit by toxican on Tuesday June 14, 2016 @11:45AM (#11902759)
I think many (most?) web developers get their start on some shared hosting provider where your only obvious option for managing MySQL databases is phpmyadmin. You have to dig a little deeper to realize you cna use MySQL Workbench, but even then a lot of them disable remote MySQL and SSH so you're SOL.

So for me, at least, it's ingrained in my head that phpmyadmin is the best tool for the job given the limitations of what I've got. Although I recently switched my company's reseller hosting account to a provider that actually allows remote MySQL or SSH, so that's exciting.

Re:PhpMyAdmin Project Successfully Completes Security Audit by 23andwalnut on Tuesday June 14, 2016 @12:30PM (#11903164)
What are some good alternatives? I've been using DataGrip the last couple of months, but prior to that I used phpMyAdmin all the time because I just couldn't find anything else as useful for MySQL. And even with DataGrip, I sometimes have to log in to phpmyadmin because there's stuff DataGrip doesn't do....
Re:PhpMyAdmin Project Successfully Completes Security Audit by blowski on Tuesday June 14, 2016 @12:28PM (#11903145)
It usually comes by default with CPanel and Plesk on web servers, as well as MAMP / WAMP / XAMPP for development environments. In my experience it's still used a lot by junior devs who haven't yet learned any different, and people with absolutely no idea what they're doing.
Re:PhpMyAdmin Project Successfully Completes Security Audit by acomjean on Tuesday June 14, 2016 @04:08PM (#11904945)
Yes. A lot of times its available on shared hosting behind some login. Esp, if you don't have shell access on inexpensive hosts.

Its been available at places I've worked. It was locked down by IP. The database was restricted to access by ip too, in theory making outside access more difficult.

I used it a lot (less now) and honestly, I kind of like it. The interface is a little kludgy, but it gets the job done. Queries are editable, exportable in various formats. You can construct a search via gui then edit the SQL it generates . It seems to have a lot of functionality built in, user/table management etc..

For local instances I use sequel pro too (the ssh login function it has is nice and works well).

Re:PhpMyAdmin Project Successfully Completes Security Audit by hackaflocka on Tuesday June 14, 2016 @05:12PM (#11905353)
PHPMyAdmin is a lifesaver for newbies and those who are intimidated by the Command Line. It was for me, and I still prefer to use it when possible.

I can't thank the people who created it and maintain it enough.

Re:PhpMyAdmin Project Successfully Completes Security Audit by callesgg on Tuesday June 14, 2016 @06:34PM (#11905884)
I think it is one of the best mariadb/mysql gui's out there.

But to get the good stuff one has to configure it properly, and generally people don't bather configuring it. They just place the files in a folder.

No other web based tool for any database that i have tried even comes close.

Re:PhpMyAdmin Project Successfully Completes Security Audit by 20years on Tuesday June 14, 2016 @11:49AM (#11902803)
I personally use Workbench when I can but a lot of clients with shared hosting use it. It still gets the job done for the most part.