phpMyAdmin interface accessible while plugin deactivated
-
Hello,
I have noticed that the phpMyAdmin interface and browsing through the local database are available even after I deactivated the plugin.
Steps to reproduce:
- Install and activate the plugin.
- Go to Dashboard > WP-phpMyAdmin > click Enter local phpMyAdmin – this will open a new tab with the phpMyAdmin interface.
- Open a new tab with the Dashboard, then disable the plugin.
- Refresh the page from step 2. It’s working, and it shouldn’t, right?
Regards,
Vlad
-
Thanks for report.
PhpMyAdmin works with sessions, which is not linked with WordPress. To exit from PhpMyAdmin, there you have to explicitly click “Log Out” button which is on left top side. Even if you won’t logout manually, the session expires in 1 hour by default anyway.
When pushing this plugin, we have also considered that logging out from WordPress could also trigger log-out from PhpMyAdmin session, but, as PMA is strictly recommended for development purposes, people might use it to migrate/import databases/users etc, and it’s important to have access to PMA during that debug process (while you might have all plugins disabled or even fully deleted database, thus effectively logged out from WP. however, it will only last up to 1 hour).
But I will give it a second thought and might push an update to plugin, which might optionally trigger PMA logout during wordpress logout.
- The topic ‘phpMyAdmin interface accessible while plugin deactivated’ is closed to new replies.
