11:24 matthew 

* Review port dependencies based on composer.json files included in
  the source

  - Add hash as a required dependency [1]

  - Move xml from optional to required

  - Add curl, gmp, opcache and sodium as optional dependencies: all of
    these default to off.  sodium only works with php >= 7.2, but
    there is no mechanism for modifying options dependent on flavour
    settings at the moment.

  - Move mbstring from required to optional dependency: defaults to on

* Sort lists of options

* Remove references to the redundant 'OPTIONS_MULTI_DB_connect': this
  was a remnant from an earlier version of the port which allowed
  switching between the old 'mysql' and the current 'mysqli' modules.

* Add an empty %%WWWDIR%%/tmp directory to the plist: this is
  referenced in the configuration defaults [2].  Make this writable by
  the www group.

PR:		227803
Submitted by:	marko.cupac@mimar.rs [1]
Reported by:	marko.cupac@mimar.rs [2]

 

19:31 antoine 

Allow staging as a regular user

 

22:03 matthew 

Security update to 4.2.4

  - while here switch plist to use @sample

The advisories: PMASA-2014-2 and PMASA-2014-3, have not been published
yet, so there is very little concrete information about what the
security problems are. About all there is comes from the change log,
where the security issues are listed as:

- bug #4464 [security] XSS injection due to unescaped db/table name in
navigation hiding
- bug #4465 [security] XSS injection due to unescaped db/table name in
recent/favorite tables

ChaneLog:	http://sourceforge.net/projects/phpmyadmin/files/phpMyAdmin/4.2.4/phpMyAdmin-4.2.4-notes.html/view
MFH:		2014Q2

 

22:26 miwi 

- Force commit to notes that's a Security update

- Update to 2.11.5.2
- Use the ${PW} variable

PR:             123004
Submitted by:   Matthew Seaman <m.seaman@infracaninophile.co.uk> (maintainer)
Security:      
http://www.vuxml.org/freebsd/6eb1dc51-1244-11dd-bab7-0016179b2dd5.html
               
http://www.vuxml.org/freebsd/fe971a0f-1246-11dd-bab7-0016179b2dd5.html

10:58 miwi 

Changes:

* When installed using WITH_SUPHP use a fix username/UID from
/usr/ports/UIDs. There's no equivalent /usr/ports/GIDs entry
because it defaults to group 'www'.

* Consequently change the default username from phpmyadm to _pma
  and add an entry to /usr/ports/UIDs:

_pma:*:336:80:phpMyAdmin Owner:/nonexistent:/sbin/nologin

* Use the standard $WWWDIR for PLIST_SUB and SUB_LIST, instead of
  rolling my own equivalent.

* Various internal code changes and clean-up

* Bump PORTREVISION

Note: the changes here mostly affect compilation with WITH_SUPHP
defined. If you're not a suPHP user, then there's very little
ultimately that has changed.

PR:             119825
Submitted by:   Matthew Seaman <m.seaman@infracaninophile.co.uk> (maintainer)

16:29 thierry 

- moves the default installation directory to /usr/local/www/phpMyAdmin
  instead of /usr/local/www/data/phpMyAdmin

- Improves handling config files, making them not world readable
  by default.

- Generates pkg-plist dynamically

- Adds a WITH_SUPHP option

PR:             ports/66697
Submitted by:   maintainer