phpmyadmin/docs/config.rst

config.inc.php

Configuration

All configurable data is placed in config.inc.php in phpMyAdmin's toplevel directory. If this file does not exist, please refer to the setup section to create one. This file only needs to contain the parameters you want to change from their corresponding default value.

config-examples for examples of configurations

If a directive is missing from your file, you can just add another line with the file. This file is for over-writing the defaults; if you wish to use the default value there's no need to add a line here.

The parameters which relate to design (like colors) are placed in themes/themename/scss/_variables.scss. You might also want to create config.footer.inc.php and config.header.inc.php files to add your site specific code to be included on start and end of each page.

Note

Some distributions (eg. Debian or Ubuntu) store config.inc.php in /etc/phpmyadmin instead of within phpMyAdmin sources.

Basic settings

type

string

default

''

4.6.5

This setting was not available in phpMyAdmin 4.6.0 - 4.6.4.

Sets here the complete URL (with full path) to your phpMyAdmin installation's directory. E.g. https://www.example.net/path_to_your_phpMyAdmin_directory/. Note also that the URL on most of web servers are case sensitive (even on Windows). Don’t forget the trailing slash at the end.

Starting with version 2.3.0, it is advisable to try leaving this blank. In most cases phpMyAdmin automatically detects the proper setting. Users of port forwarding or complex reverse proxy setup might need to set this.

A good test is to browse a table, edit a row and save it. There should be an error message if phpMyAdmin is having trouble auto–detecting the correct value. If you get an error that this must be set or if the autodetect code fails to detect your path, please post a bug report on our bug tracker so we can improve the code.

faq1_40, faq2_5, faq4_7, faq5_16

type

boolean

default

false

Starting with version 2.3.0 phpMyAdmin offers a lot of features to work with master / foreign – tables (see $cfg['Servers'][$i]['pmadb']).

If you tried to set this up and it does not work for you, have a look on the Structure page of one database where you would like to use it. You will find a link that will analyze why those features have been disabled.

If you do not want to use those features set this variable to true to stop this message from appearing.

type

string

default

'auto'

4.8.0

This is supported since phpMyAdmin 4.8.0.

Configure authentication logging destination. Failed (or all, depending on $cfg['AuthLogSuccess']) authentication attempts will be logged according to this directive:

auto

Let phpMyAdmin automatically choose between syslog and php.

syslog

Log using syslog, using AUTH facility, on most systems this ends up in /var/log/auth.log.

php

Log into PHP error log.

sapi

Log into PHP SAPI logging.

/path/to/file

Any other value is treated as a filename and log entries are written there.

Note

When logging to a file, make sure its permissions are correctly set for a web server user, the setup should closely match instructions described in $cfg['TempDir']:

type

boolean

default

false

4.8.0

This is supported since phpMyAdmin 4.8.0.

Whether to log successful authentication attempts into $cfg['AuthLog'].

type

boolean

default

false

6.0.0

This setting has been removed. The Suhosin extension is no longer supported.

A warning is displayed on the main page if Suhosin is detected.

You can set this parameter to true to stop this message from appearing.

type

boolean

default

false

A warning is displayed on the main page if the PHP parameter session.gc_maxlifetime is lower than cookie validity configured in phpMyAdmin.

You can set this parameter to true to stop this message from appearing.

type

boolean

default

false

4.7.0

This setting was removed as the warning has been removed as well.

A warning is displayed on the main page if there is a difference between the MySQL library and server version.

You can set this parameter to true to stop this message from appearing.

type

boolean

default

false

This warning is displayed on the Structure page of a table if one or more column names match with words which are MySQL reserved.

If you want to turn off this warning, you can set it to true and warning will no longer be displayed.

type

integer

default

80

Show warning about incomplete translations on certain threshold.

type

string

default

'ask'

Valid values are:

• ask
• always
• never

Sets the default behavior for JavaScript error reporting.

Whenever an error is detected in the JavaScript execution, an error report may be sent to the phpMyAdmin team if the user agrees.

The default setting of 'ask' will ask the user everytime there is a new error report. However you can set this parameter to 'always' to send error reports without asking for confirmation or you can set it to 'never' to never send error reports.

This directive is available both in the configuration file and in users preferences. If the person in charge of a multi-user installation prefers to disable this feature for all users, a value of 'never' should be set, and the $cfg['UserprefsDisallow'] directive should contain 'SendErrorReports' in one of its array values.

type

boolean

default

false

Setting this to true allows the user to execute queries by pressing Enter instead of Ctrl+Enter. A new line can be inserted by pressing Shift+Enter.

The behaviour of the console can be temporarily changed using console's settings interface.

type

boolean|string

default

false

Setting this to true allows phpMyAdmin to be included inside a frame, and is a potential security hole allowing cross-frame scripting attacks or clickjacking. Setting this to 'sameorigin' prevents phpMyAdmin to be included from another document in a frame, unless that document belongs to the same domain.

Server connection settings

type

array

default

one server array with settings listed below

Since version 1.4.2, phpMyAdmin supports the administration of multiple MySQL servers. Therefore, a $cfg['Servers']-array has been added which contains the login information for the different servers. The first $cfg['Servers'][$i]['host'] contains the hostname of the first server, the second $cfg['Servers'][$i]['host'] the hostname of the second server, etc. You can put as many sections for server definition as you need in config.inc.php, copy that block or needed parts (you don't have to define all settings, just those you need to change).

Note

The $cfg['Servers'] array starts with $cfg['Servers'][1]. Do not use $cfg['Servers'][0]. If you want more than one server, just copy following section (including $i increment) several times. There is no need to define full server array, just define values you need to change.

type

string

default

'localhost'

The hostname or IP address of your $i-th MySQL-server. E.g. localhost.

Possible values are:

• hostname, e.g., 'localhost' or 'mydb.example.org'
• IP address, e.g., '127.0.0.1' or '192.168.10.1'
• IPv6 address, e.g. 2001:cdba:0000:0000:0000:0000:3257:9652
• dot - '.', i.e., use named pipes on windows systems
• empty - '', disables this server

Note

The hostname localhost is handled specially by MySQL and it uses the socket based connection protocol. To use TCP/IP networking, use an IP address or hostname such as 127.0.0.1 or db.example.com. You can configure the path to the socket with $cfg['Servers'][$i]['socket'].

$cfg['Servers'][$i]['port'], <https://dev.mysql.com/doc/refman/8.0/en/connecting.html>

type

string

default

''

The port-number of your $i-th MySQL-server. Default is 3306 (leave blank).

Note

If you use localhost as the hostname, MySQL ignores this port number and connects with the socket, so if you want to connect to a port different from the default port, use 127.0.0.1 or the real hostname in $cfg['Servers'][$i]['host'].

$cfg['Servers'][$i]['host'], <https://dev.mysql.com/doc/refman/8.0/en/connecting.html>

type

string

default

''

The path to the socket to use. Leave blank for default. To determine the correct socket, check your MySQL configuration or, using the mysql command–line client, issue the status command. Among the resulting information displayed will be the socket used.

Note

This takes effect only if $cfg['Servers'][$i]['host'] is set to localhost.

$cfg['Servers'][$i]['host'], <https://dev.mysql.com/doc/refman/8.0/en/connecting.html>

type

boolean

default

false

Whether to enable SSL for the connection between phpMyAdmin and the MySQL server to secure the connection.

When using the 'mysql' extension, none of the remaining 'ssl...' configuration options apply.

We strongly recommend the 'mysqli' extension when using this option.

ssl, example-google-ssl, example-aws-ssl, $cfg['Servers'][$i]['ssl_key'], $cfg['Servers'][$i]['ssl_cert'], $cfg['Servers'][$i]['ssl_ca'], $cfg['Servers'][$i]['ssl_ca_path'], $cfg['Servers'][$i]['ssl_ciphers'], $cfg['Servers'][$i]['ssl_verify']

type

string

default

NULL

Path to the client key file when using SSL for connecting to the MySQL server. This is used to authenticate the client to the server.

For example:

$cfg['Servers'][$i]['ssl_key'] = '/etc/mysql/server-key.pem';

ssl, example-google-ssl, example-aws-ssl, $cfg['Servers'][$i]['ssl'], $cfg['Servers'][$i]['ssl_cert'], $cfg['Servers'][$i]['ssl_ca'], $cfg['Servers'][$i]['ssl_ca_path'], $cfg['Servers'][$i]['ssl_ciphers'], $cfg['Servers'][$i]['ssl_verify']

type

string

default

NULL

Path to the client certificate file when using SSL for connecting to the MySQL server. This is used to authenticate the client to the server.

ssl, example-google-ssl, example-aws-ssl, $cfg['Servers'][$i]['ssl'], $cfg['Servers'][$i]['ssl_key'], $cfg['Servers'][$i]['ssl_ca'], $cfg['Servers'][$i]['ssl_ca_path'], $cfg['Servers'][$i]['ssl_ciphers'], $cfg['Servers'][$i]['ssl_verify']

type

string

default

NULL

Path to the CA file when using SSL for connecting to the MySQL server.

ssl, example-google-ssl, example-aws-ssl, $cfg['Servers'][$i]['ssl'], $cfg['Servers'][$i]['ssl_key'], $cfg['Servers'][$i]['ssl_cert'], $cfg['Servers'][$i]['ssl_ca_path'], $cfg['Servers'][$i]['ssl_ciphers'], $cfg['Servers'][$i]['ssl_verify']

type

string

default

NULL

Directory containing trusted SSL CA certificates in PEM format.

ssl, example-google-ssl, example-aws-ssl, $cfg['Servers'][$i]['ssl'], $cfg['Servers'][$i]['ssl_key'], $cfg['Servers'][$i]['ssl_cert'], $cfg['Servers'][$i]['ssl_ca'], $cfg['Servers'][$i]['ssl_ciphers'], $cfg['Servers'][$i]['ssl_verify']

type

string

default

NULL

List of allowable ciphers for SSL connections to the MySQL server.

ssl, example-google-ssl, example-aws-ssl, $cfg['Servers'][$i]['ssl'], $cfg['Servers'][$i]['ssl_key'], $cfg['Servers'][$i]['ssl_cert'], $cfg['Servers'][$i]['ssl_ca'], $cfg['Servers'][$i]['ssl_ca_path'], $cfg['Servers'][$i]['ssl_verify']

type

boolean

default

true

4.6.0

This is supported since phpMyAdmin 4.6.0.

If your PHP install uses the MySQL Native Driver (mysqlnd), your MySQL server is 5.6 or later, and your SSL certificate is self-signed, there is a chance your SSL connection will fail due to validation. Setting this to false will disable the validation check.

Since PHP 5.6.0 it also verifies whether server name matches CN of its certificate. There is currently no way to disable just this check without disabling complete SSL verification.

Warning

Disabling the certificate verification defeats purpose of using SSL. This will make the connection vulnerable to man in the middle attacks.

Note

This flag only works with PHP 5.6.16 or later.

ssl, example-google-ssl, example-aws-ssl, $cfg['Servers'][$i]['ssl'], $cfg['Servers'][$i]['ssl_key'], $cfg['Servers'][$i]['ssl_cert'], $cfg['Servers'][$i]['ssl_ca'], $cfg['Servers'][$i]['ssl_ca_path'], $cfg['Servers'][$i]['ssl_ciphers'], $cfg['Servers'][$i]['ssl_verify']

type

string

default

'tcp'

4.7.0

This setting is no longer used as of 4.7.0, since MySQL decides the connection type based on host, so it could lead to unexpected results. Please set $cfg['Servers'][$i]['host'] accordingly instead.

What type connection to use with the MySQL server. Your options are 'socket' and 'tcp'. It defaults to tcp as that is nearly guaranteed to be available on all MySQL servers, while sockets are not supported on some platforms. To use the socket mode, your MySQL server must be on the same machine as the Web server.

type

boolean

default

false

Whether to use a compressed protocol for the MySQL server connection or not (experimental).

type

string

default

''

Permits to use an alternate host to hold the configuration storage data.

$cfg['Servers'][$i]['control_*']

type

string

default

''

Permits to use an alternate port to connect to the host that holds the configuration storage.

$cfg['Servers'][$i]['control_*']

type

string

default

''

type

string

default

''

This special account is used to access linked-tables. You don't need it in single user case, but if phpMyAdmin is shared it is recommended to give access to linked-tables only to this user and configure phpMyAdmin to use it. All users will then be able to use the features without need to have direct access to linked-tables.

2.2.5 those were called stduser and stdpass

setup, authentication_modes, linked-tables, $cfg['Servers'][$i]['pmadb'], $cfg['Servers'][$i]['controlhost'], $cfg['Servers'][$i]['controlport'], $cfg['Servers'][$i]['control_*']

type

mixed

4.7.0

You can change any MySQL connection setting for control link (used to access linked-tables) using configuration prefixed with control_.

This can be used to change any aspect of the control connection, which by default uses same parameters as the user one.

For example you can configure SSL for the control connection:

// Enable SSL
$cfg['Servers'][$i]['control_ssl'] = true;
// Client secret key
$cfg['Servers'][$i]['control_ssl_key'] = '../client-key.pem';
// Client certificate
$cfg['Servers'][$i]['control_ssl_cert'] = '../client-cert.pem';
// Server certification authority
$cfg['Servers'][$i]['control_ssl_ca'] = '../server-ca.pem';

$cfg['Servers'][$i]['ssl'], $cfg['Servers'][$i]['ssl_key'], $cfg['Servers'][$i]['ssl_cert'], $cfg['Servers'][$i]['ssl_ca'], $cfg['Servers'][$i]['ssl_ca_path'], $cfg['Servers'][$i]['ssl_ciphers'], $cfg['Servers'][$i]['ssl_verify'], $cfg['Servers'][$i]['socket'], $cfg['Servers'][$i]['compress'], $cfg['Servers'][$i]['hide_connection_errors']

type

string

default

'cookie'

Whether config or cookie or HTTP or signon authentication should be used for this server.

• 'config' authentication ($auth_type = 'config') is the plain old way: username and password are stored in config.inc.php.
• 'cookie' authentication mode ($auth_type = 'cookie') allows you to log in as any valid MySQL user with the help of cookies.
• 'http' authentication allows you to log in as any valid MySQL user via HTTP-Auth.
• 'signon' authentication mode ($auth_type = 'signon') allows you to log in from prepared PHP session data or using supplied PHP script.

authentication_modes

type

string

default

''

When using 'http' for $cfg['Servers'][$i]['auth_type'], this field allows to define a custom HTTP Basic Auth Realm which will be displayed to the user. If not explicitly specified in your configuration, a string combined of "phpMyAdmin " and either $cfg['Servers'][$i]['verbose'] or $cfg['Servers'][$i]['host'] will be used.

type

string

default

''

3.0.0.0

This setting was named $cfg['Servers'][$i]['auth_feebee_config'] and was renamed before the 3.0.0.0 release.

4.6.4

This setting was removed because their servers are no longer working and it was not working correctly.

4.0.10.17

This setting was removed in a maintenance release because their servers are no longer working and it was not working correctly.

The name of the file containing swekey ids and login names for hardware authentication. Leave empty to deactivate this feature.

type

string

default

'root'

type

string

default

''

When using $cfg['Servers'][$i]['auth_type'] set to 'config', this is the user/password-pair which phpMyAdmin will use to connect to the MySQL server. This user/password pair is not needed when HTTP or cookie authentication is used and should be empty.

type

boolean

default

false

4.7.0

This setting was removed as it can produce unexpected results.

Allow attempt to log in without password when a login with password fails. This can be used together with http authentication, when authentication is done some other way and phpMyAdmin gets user name from auth and uses empty password for connecting to MySQL. Password login is still tried first, but as fallback, no password method is tried.

Note

It is possible to allow logging in with no password with the $cfg['Servers'][$i]['AllowNoPassword'] directive.

type

string or array

default

''

If set to a (an array of) database name(s), only this (these) database(s) will be shown to the user. Since phpMyAdmin 2.2.1, this/these database(s) name(s) may contain MySQL wildcards characters ("_" and "%"): if you want to use literal instances of these characters, escape them (I.E. use 'my\_db' and not 'my_db').

This setting is an efficient way to lower the server load since the latter does not need to send MySQL requests to build the available database list. But it does not replace the privileges rules of the MySQL database server. If set, it just means only these databases will be displayed but not that all other databases can't be used.

An example of using more that one database:

$cfg['Servers'][$i]['only_db'] = ['db1', 'db2'];

4.0.0 Previous versions permitted to specify the display order of the database names via this directive.

type

string

default

''

Regular expression for hiding some databases from unprivileged users. This only hides them from listing, but a user is still able to access them (using, for example, the SQL query area). To limit access, use the MySQL privilege system. For example, to hide all databases starting with the letter "a", use

$cfg['Servers'][$i]['hide_db'] = '^a';

and to hide both "db1" and "db2" use

$cfg['Servers'][$i]['hide_db'] = '^(db1|db2)$';

More information on regular expressions can be found in the PCRE pattern syntax portion of the PHP reference manual.

type

string

default

''

Only useful when using phpMyAdmin with multiple server entries. If set, this string will be displayed instead of the hostname in the pull-down menu on the main page. This can be useful if you want to show only certain databases on your system, for example. For HTTP auth, all non-US-ASCII characters will be stripped.

type

string

default

'mysqli'

4.2.0

This setting was removed. The mysql extension will only be used when the mysqli extension is not available. As of 5.0.0, only the mysqli extension can be used.

The PHP MySQL extension to use (mysql or mysqli).

It is recommended to use mysqli in all installations.

type

string

default

''

The name of the database containing the phpMyAdmin configuration storage.

See the linked-tables section in this document to see the benefits of this feature, and for a quick way of creating this database and the needed tables.

If you are the only user of this phpMyAdmin installation, you can use your current database to store those special tables; in this case, just put your current database name in $cfg['Servers'][$i]['pmadb']. For a multi-user installation, set this parameter to the name of your central database containing the phpMyAdmin configuration storage.

type

string or false

default

''

2.2.0

Since release 2.2.0 phpMyAdmin allows users to bookmark queries. This can be useful for queries you often run. To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• enter the table name in $cfg['Servers'][$i]['bookmarktable']

This feature can be disabled by setting the configuration to false.

type

string or false

default

''

2.2.4

Since release 2.2.4 you can describe, in a special 'relation' table, which column is a key in another table (a foreign key). phpMyAdmin currently uses this to:

• make clickable, when you browse the master table, the data values that point to the foreign table;
• display in an optional tool-tip the "display column" when browsing the master table, if you move the mouse to a column containing a foreign key (use also the table_info table); (see faqdisplay)
• in edit/insert mode, display a drop-down list of possible foreign keys (key value and "display column" are shown) (see faq6_21)
• display links on the table properties page, to check referential integrity (display missing foreign keys) for each described key;
• in query-by-example, create automatic joins (see faq6_6)
• enable you to get a PDF schema of your database (also uses the table_coords table).

The keys can be numeric or character.

To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the relation table name in $cfg['Servers'][$i]['relation']
• now as normal user open phpMyAdmin and for each one of your tables where you want to use this feature, click Structure/Relation view/ and choose foreign columns.

This feature can be disabled by setting the configuration to false.

Note

In the current version, master_db must be the same as foreign_db. Those columns have been put in future development of the cross-db relations.

type

string or false

default

''

2.3.0

Since release 2.3.0 you can describe, in a special table_info table, which column is to be displayed as a tool-tip when moving the cursor over the corresponding key. This configuration variable will hold the name of this special table. To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the table name in $cfg['Servers'][$i]['table\_info'] (e.g. pma__table_info)
• then for each table where you want to use this feature, click "Structure/Relation view/Choose column to display" to choose the column.

This feature can be disabled by setting the configuration to false.

faqdisplay

type

string or false

default

''

The designer feature can save your page layout; by pressing the "Save page" or "Save page as" button in the expanding designer menu, you can customize the layout and have it loaded the next time you use the designer. That layout is stored in this table. Furthermore, this table is also required for using the PDF relation export feature, see $cfg['Servers'][$i]['pdf\_pages'] for additional details.

type

string or false

default

''

2.3.0

Since release 2.3.0 you can have phpMyAdmin create PDF pages showing the relations between your tables. Further, the designer interface permits visually managing the relations. To do this it needs two tables "pdf_pages" (storing information about the available PDF pages) and "table_coords" (storing coordinates where each table will be placed on a PDF schema output). You must be using the "relation" feature.

To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the correct table names in $cfg['Servers'][$i]['table\_coords'] and $cfg['Servers'][$i]['pdf\_pages']

This feature can be disabled by setting either of the configurations to false.

faqpdf.

type

string

default

''

2.10.0

Since release 2.10.0 a Designer interface is available; it permits to visually manage the relations.

4.3.0

This setting was removed and the Designer table positioning data is now stored into $cfg['Servers'][$i]['table\_coords'].

Note

You can now delete the table pma__designer_coords from your phpMyAdmin configuration storage database and remove $cfg['Servers'][$i]['designer\_coords'] from your configuration file.

type

string or false

default

''

2.3.0

This part requires a content update! Since release 2.3.0 you can store comments to describe each column for each table. These will then be shown on the "printview".

Starting with release 2.5.0, comments are consequently used on the table property pages and table browse view, showing up as tool-tips above the column name (properties page) or embedded within the header of table in browse view. They can also be shown in a table dump. Please see the relevant configuration directives later on.

Also new in release 2.5.0 is a MIME- transformation system which is also based on the following table structure. See transformations for further information. To use the MIME- transformation system, your column_info table has to have the three new columns 'mimetype', 'transformation', 'transformation_options'.

Starting with release 4.3.0, a new input-oriented transformation system has been introduced. Also, backward compatibility code used in the old transformations system was removed. As a result, an update to column_info table is necessary for previous transformations and the new input-oriented transformation system to work. phpMyAdmin will upgrade it automatically for you by analyzing your current column_info table structure. However, if something goes wrong with the auto-upgrade then you can use the SQL script found in ./resources/sql/upgrade_column_info_4_3_0+.sql to upgrade it manually.

To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage

• put the table name in $cfg['Servers'][$i]['column\_info'] (e.g. pma__column_info)

• to update your PRE-2.5.0 column_comments table use this: and remember that the Variable in config.inc.php has been renamed from $cfg['Servers'][$i]['column\_comments'] to $cfg['Servers'][$i]['column\_info']

  ALTER TABLE `pma__column_comments`
  ADD `mimetype` VARCHAR(255) NOT NULL,
  ADD `transformation` VARCHAR(255) NOT NULL,
  ADD `transformation_options` VARCHAR(255) NOT NULL;

• to update your PRE-4.3.0 column_info table manually use this ./resources/sql/upgrade_column_info_4_3_0+.sql SQL script.

This feature can be disabled by setting the configuration to false.

Note

For auto-upgrade functionality to work, your $cfg['Servers'][$i]['controluser'] must have ALTER privilege on phpmyadmin database. See the MySQL documentation for GRANT on how to GRANT privileges to a user.

type

string or false

default

''

2.5.0

Since release 2.5.0 you can store your SQL history, which means all queries you entered manually into the phpMyAdmin interface. If you don't want to use a table-based history, you can use the JavaScript-based history.

Using that, all your history items are deleted when closing the window. Using $cfg['QueryHistoryMax'] you can specify an amount of history items you want to have on hold. On every login, this list gets cut to the maximum amount.

The query history is only available if JavaScript is enabled in your browser.

To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the table name in $cfg['Servers'][$i]['history'] (e.g. pma__history)

This feature can be disabled by setting the configuration to false.

type

string or false

default

''

3.5.0

Since release 3.5.0 you can show recently used tables in the navigation panel. It helps you to jump across table directly, without the need to select the database, and then select the table. Using $cfg['NumRecentTables'] you can configure the maximum number of recent tables shown. When you select a table from the list, it will jump to the page specified in $cfg['NavigationTreeDefaultTabTable'].

Without configuring the storage, you can still access the recently used tables, but it will disappear after you logout.

To allow the usage of this functionality persistently:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the table name in $cfg['Servers'][$i]['recent'] (e.g. pma__recent)

This feature can be disabled by setting the configuration to false.

type

string or false

default

''

4.2.0

Since release 4.2.0 you can show a list of selected tables in the navigation panel. It helps you to jump to the table directly, without the need to select the database, and then select the table. When you select a table from the list, it will jump to the page specified in $cfg['NavigationTreeDefaultTabTable'].

You can add tables to this list or remove tables from it in database structure page by clicking on the star icons next to table names. Using $cfg['NumFavoriteTables'] you can configure the maximum number of favorite tables shown.

Without configuring the storage, you can still access the favorite tables, but it will disappear after you logout.

To allow the usage of this functionality persistently:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the table name in $cfg['Servers'][$i]['favorite'] (e.g. pma__favorite)

This feature can be disabled by setting the configuration to false.

type

string or false

default

''

3.5.0

Since release 3.5.0 phpMyAdmin can be configured to remember several things (sorted column $cfg['RememberSorting'], column order, and column visibility from a database table) for browsing tables. Without configuring the storage, these features still can be used, but the values will disappear after you logout.

To allow the usage of these functionality persistently:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the table name in $cfg['Servers'][$i]['table\_uiprefs'] (e.g. pma__table_uiprefs)

This feature can be disabled by setting the configuration to false.

type

string or false

default

''

The table used by phpMyAdmin to store user name information for associating with user groups. See the next entry on $cfg['Servers'][$i]['usergroups'] for more details and the suggested settings.

type

string or false

default

''

4.1.0

Since release 4.1.0 you can create different user groups with menu items attached to them. Users can be assigned to these groups and the logged in user would only see menu items configured to the usergroup they are assigned to. To do this it needs two tables "usergroups" (storing allowed menu items for each user group) and "users" (storing users and their assignments to user groups).

To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the correct table names in $cfg['Servers'][$i]['users'] (e.g. pma__users) and $cfg['Servers'][$i]['usergroups'] (e.g. pma__usergroups)

This feature can be disabled by setting either of the configurations to false.

configurablemenus

type

string or false

default

''

4.1.0

Since release 4.1.0 you can hide/show items in the navigation tree.

To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the table name in $cfg['Servers'][$i]['navigationhiding'] (e.g. pma__navigationhiding)

This feature can be disabled by setting the configuration to false.

type

string or false

default

''

4.3.0

Since release 4.3.0 you can have a central list of columns per database. You can add/remove columns to the list as per your requirement. These columns in the central list will be available to use while you create a new column for a table or create a table itself. You can select a column from central list while creating a new column, it will save you from writing the same column definition over again or from writing different names for similar column.

To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the table name in $cfg['Servers'][$i]['central_columns'] (e.g. pma__central_columns)

This feature can be disabled by setting the configuration to false.

type

string or false

default

''

4.5.0

Since release 4.5.0 your designer settings can be remembered. Your choice regarding 'Angular/Direct Links', 'Snap to Grid', 'Toggle Relation Lines', 'Small/Big All', 'Move Menu' and 'Pin Text' can be remembered persistently.

To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the table name in $cfg['Servers'][$i]['designer_settings'] (e.g. pma__designer_settings)

This feature can be disabled by setting the configuration to false.

type

string or false

default

''

4.2.0

Since release 4.2.0 you can save and load query-by-example searches from the Database > Query panel.

To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the table name in $cfg['Servers'][$i]['savedsearches'] (e.g. pma__savedsearches)

This feature can be disabled by setting the configuration to false.

type

string or false

default

''

4.5.0

Since release 4.5.0 you can save and load export templates.

To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the table name in $cfg['Servers'][$i]['export_templates'] (e.g. pma__export_templates)

This feature can be disabled by setting the configuration to false.

type

string or false

default

''

3.3.x

Since release 3.3.x a tracking mechanism is available. It helps you to track every SQL command which is executed by phpMyAdmin. The mechanism supports logging of data manipulation and data definition statements. After enabling it you can create versions of tables.

The creation of a version has two effects:

• phpMyAdmin saves a snapshot of the table, including structure and indexes.
• phpMyAdmin logs all commands which change the structure and/or data of the table and links these commands with the version number.

Of course you can view the tracked changes. On the Tracking page a complete report is available for every version. For the report you can use filters, for example you can get a list of statements within a date range. When you want to filter usernames you can enter * for all names or you enter a list of names separated by ','. In addition you can export the (filtered) report to a file or to a temporary database.

To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the table name in $cfg['Servers'][$i]['tracking'] (e.g. pma__tracking)

This feature can be disabled by setting the configuration to false.

type

boolean

default

false

Whether the tracking mechanism creates versions for tables and views automatically.

If this is set to true and you create a table or view with

• CREATE TABLE ...
• CREATE VIEW ...

and no version exists for it, the mechanism will create a version for you automatically.

type

string

default

'CREATE TABLE,ALTER TABLE,DROP TABLE,RENAME TABLE,CREATE INDEX,DROP INDEX,INSERT,UPDATE,DELETE,TRUNCATE,REPLACE,CREATE VIEW,ALTER VIEW,DROP VIEW,CREATE DATABASE,ALTER DATABASE,DROP DATABASE'

Defines the list of statements the auto-creation uses for new versions.

type

boolean

default

true

Whether a DROP VIEW IF EXISTS statement will be added as first line to the log when creating a view.

type

boolean

default

true

Whether a DROP TABLE IF EXISTS statement will be added as first line to the log when creating a table.

type

boolean

default

true

Whether a DROP DATABASE IF EXISTS statement will be added as first line to the log when creating a database.

type

string or false

default

''

3.4.x

Since release 3.4.x phpMyAdmin allows users to set most preferences by themselves and store them in the database.

If you don't allow for storing preferences in $cfg['Servers'][$i]['pmadb'], users can still personalize phpMyAdmin, but settings will be saved in browser's local storage, or, it is is unavailable, until the end of session.

To allow the usage of this functionality:

• set up $cfg['Servers'][$i]['pmadb'] and the phpMyAdmin configuration storage
• put the table name in $cfg['Servers'][$i]['userconfig']

This feature can be disabled by setting the configuration to false.

type

integer

default

100

Maximum number of rows saved in $cfg['Servers'][$i]['table_uiprefs'] table.

When tables are dropped or renamed, $cfg['Servers'][$i]['table_uiprefs'] may contain invalid data (referring to tables which no longer exist). We only keep this number of newest rows in $cfg['Servers'][$i]['table_uiprefs'] and automatically delete older rows.

type

string

default

''

Sets the time zone used by phpMyAdmin. Leave blank to use the time zone of your database server. Possible values are explained at https://dev.mysql.com/doc/refman/8.0/en/time-zone-support.html

This is useful when your database server uses a time zone which is different from the time zone you want to use in phpMyAdmin.

type

boolean

default

true

Whether to allow root access. This is just a shortcut for the $cfg['Servers'][$i]['AllowDeny']['rules'] below.

type

boolean

default

false

Whether to allow logins without a password. The default value of false for this parameter prevents unintended access to a MySQL server with was left with an empty password for root or on which an anonymous (blank) user is defined.

type

string

default

''

If your rule order is empty, then IP authorization is disabled.

If your rule order is set to 'deny,allow' then the system applies all deny rules followed by allow rules. Access is allowed by default. Any client which does not match a Deny command or does match an Allow command will be allowed access to the server.

If your rule order is set to 'allow,deny' then the system applies all allow rules followed by deny rules. Access is denied by default. Any client which does not match an Allow directive or does match a Deny directive will be denied access to the server.

If your rule order is set to 'explicit', authorization is performed in a similar fashion to rule order 'deny,allow', with the added restriction that your host/username combination must be listed in the allow rules, and not listed in the deny rules. This is the most secure means of using Allow/Deny rules, and was available in Apache by specifying allow and deny rules without setting any order.

Please also see $cfg['TrustedProxies'] for detecting IP address behind proxies.

type

array of strings

default

[]

The general format for the rules is as such:

<'allow' | 'deny'> <username> [from] <ipmask>

If you wish to match all users, it is possible to use a '%' as a wildcard in the username field.

There are a few shortcuts you can use in the ipmask field as well (please note that those containing SERVER_ADDRESS might not be available on all webservers):

'all' -> 0.0.0.0/0
'localhost' -> 127.0.0.1/8
'localnetA' -> SERVER_ADDRESS/8
'localnetB' -> SERVER_ADDRESS/16
'localnetC' -> SERVER_ADDRESS/24

Having an empty rule list is equivalent to either using 'allow % from all' if your rule order is set to 'deny,allow' or 'deny % from all' if your rule order is set to 'allow,deny' or 'explicit'.

For the IP Address matching system, the following work:

• xxx.xxx.xxx.xxx (an exact IP Address)
• xxx.xxx.xxx.[yyy-zzz] (an IP Address range)
• xxx.xxx.xxx.xxx/nn (CIDR, Classless Inter-Domain Routing type IP addresses)

But the following does not work:

• xxx.xxx.xxx.xx[yyy-zzz] (partial IP address range)

For IPv6 addresses, the following work:

• xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx (an exact IPv6 address)
• xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:[yyyy-zzzz] (an IPv6 address range)
• xxxx:xxxx:xxxx:xxxx/nn (CIDR, Classless Inter-Domain Routing type IPv6 addresses)

But the following does not work:

• xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xx[yyy-zzz] (partial IPv6 address range)

Examples:

$cfg['Servers'][$i]['AllowDeny']['order'] = 'allow,deny';
$cfg['Servers'][$i]['AllowDeny']['rules'] = ['allow bob from all'];
// Allow only 'bob' to connect from any host

$cfg['Servers'][$i]['AllowDeny']['order'] = 'allow,deny';
$cfg['Servers'][$i]['AllowDeny']['rules'] = ['allow mary from 192.168.100.[50-100]'];
// Allow only 'mary' to connect from host 192.168.100.50 through 192.168.100.100

$cfg['Servers'][$i]['AllowDeny']['order'] = 'allow,deny';
$cfg['Servers'][$i]['AllowDeny']['rules'] = ['allow % from 192.168.[5-6].10'];
// Allow any user to connect from host 192.168.5.10 or 192.168.6.10

$cfg['Servers'][$i]['AllowDeny']['order'] = 'allow,deny';
$cfg['Servers'][$i]['AllowDeny']['rules'] = ['allow root from 192.168.5.50','allow % from 192.168.6.10'];
// Allow any user to connect from 192.168.6.10, and additionally allow root to connect from 192.168.5.50

type

boolean

default

false

Disable using INFORMATION_SCHEMA to retrieve information (use SHOW commands instead), because of speed issues when many databases are present.

Note

Enabling this option might give you a big performance boost on older MySQL servers.

type

string

default

''

3.5.0

Name of PHP script to be sourced and executed to obtain login credentials. This is alternative approach to session based single signon. The script has to provide a function called get_login_credentials which returns list of username and password, accepting single parameter of existing username (can be empty). See examples/signon-script.php for an example:

../examples/signon-script.php

auth_signon

type

string

default

''

Name of session which will be used for signon authentication method. You should use something different than phpMyAdmin, because this is session which phpMyAdmin uses internally. Takes effect only if $cfg['Servers'][$i]['SignonScript'] is not configured.

auth_signon

type

array

default

[]

4.7.0

An associative array of session cookie parameters of other authentication system. It is not needed if the other system doesn't use session_set_cookie_params(). Keys should include 'lifetime', 'path', 'domain', 'secure' or 'httponly'. Valid values are mentioned in session_get_cookie_params, they should be set to same values as the other application uses. Takes effect only if $cfg['Servers'][$i]['SignonScript'] is not configured.

auth_signon

type

string

default

''

URL where user will be redirected to log in for signon authentication method. Should be absolute including protocol.

auth_signon

type

string

default

''

URL where user will be redirected after logout (doesn't affect config authentication method). Should be absolute including protocol.

type

boolean

default

false

4.9.8

Whether to show or hide detailed MySQL/MariaDB connection errors on the login page.

Note

This error message can contain the target database server hostname or IP address, which may reveal information about your network to an attacker.

Generic settings

type

boolean

default

false

You can disable phpMyAdmin shortcut keys by setting $cfg['DisableShortcutKeys'] to true.

type

integer

default

1

If you have more than one server configured, you can set $cfg['ServerDefault'] to any one of them to autoconnect to that server when phpMyAdmin is started, or set it to 0 to be given a list of servers without logging in.

If you have only one server configured, $cfg['ServerDefault'] MUST be set to that server.

type

boolean

default

true

Enables check for latest versions using JavaScript on the main phpMyAdmin page or by directly accessing index.php?route=/version-check.

Note

This setting can be adjusted by your vendor.

type

string

default

''

The url of the proxy to be used when phpmyadmin needs to access the outside internet such as when retrieving the latest version info or submitting error reports. You need this if the server where phpMyAdmin is installed does not have direct access to the internet. The format is: "hostname:portnumber"

type

string

default

''

The username for authenticating with the proxy. By default, no authentication is performed. If a username is supplied, Basic Authentication will be performed. No other types of authentication are currently supported.

type

string

default

''

The password for authenticating with the proxy.

type

integer

default

100

The maximum number of database names to be displayed in the main panel's database list.

type

integer

default

250

The maximum number of table names to be displayed in the main panel's list (except on the Export page).

type

integer

default

250

The maximum number of routine names to be displayed in the main panel's routine list.

type

boolean

default

true

Whether or not to show hints (for example, hints when hovering over table headers).

type

integer

default

1000

The maximum number of characters when a SQL query is displayed. The default limit of 1000 should be correct to avoid the display of tons of hexadecimal codes that represent BLOBs, but some users have real SQL queries that are longer than 1000 characters. Also, if a query's length exceeds this limit, this query is not saved in the history.

type

boolean

default

false

Whether persistent connections should be used or not.

mysqli documentation for persistent connections

type

boolean

default

false

4.6.0

This setting is no longer available since phpMyAdmin 4.6.0. Please adjust your webserver instead.

Whether to force using https while accessing phpMyAdmin. In a reverse proxy setup, setting this to true is not supported.

Note

In some setups (like separate SSL proxy or load balancer) you might have to set $cfg['PmaAbsoluteUri'] for correct redirection.

type

array [list of non-empty strings]

default

['127.0.0.1', 'localhost']

5.1.0

This search is case-sensitive and will match the exact string only. If your setup does not use SSL but is safe because you are using a local connection or private network, you can add your hostname or IP to the list. You can also remove the default entries to only include yours.

This check uses the value of $cfg['Servers'][$i]['host'].

Example configuration:

$cfg['MysqlSslWarningSafeHosts'] = ['127.0.0.1', '::1', 'mariadb.local'];

type

integer [number of seconds]

default

300

Set the number of seconds a script is allowed to run. If seconds is set to zero, no time limit is imposed. This setting is used while importing/exporting dump files but has no effect when PHP is running in safe mode.

type

string

default

''

Path for storing session data (session_save_path PHP parameter).

Warning

This folder should not be publicly accessible through the webserver, otherwise you risk leaking private data from your session.

type

string [number of bytes]

default

'-1'

Set the number of bytes a script is allowed to allocate. If set to '-1', no limit is imposed. If set to '0', no change of the memory limit is attempted and the php.ini memory_limit is used.

This setting is used while importing/exporting dump files so you definitely don't want to put here a too low value. It has no effect when PHP is running in safe mode.

You can also use any string as in php.ini, eg. '16M'. Ensure you don't omit the suffix (16 means 16 bytes!)

type

boolean

default

false

Mark used tables and make it possible to show databases with locked tables (since MySQL 3.23.30).

type

boolean

default

true

Defines whether SQL queries generated by phpMyAdmin should be displayed or not.

type

boolean

default

false

Defines whether the SQL query box should be kept displayed after its submission.

type

boolean

default

true

Defines whether to use a Javascript code editor for SQL query boxes. CodeMirror provides syntax highlighting and line numbers. However, middle-clicking for pasting the clipboard contents in some Linux distributions (such as Ubuntu) is not supported by all browsers.

type

boolean

default

true

4.5.0

Defines whether to use the parser to find any errors in the query before executing.

type

string

default

'default'

Default value of the checkbox for foreign key checks, to disable/enable foreign key checks for certain queries. The possible values are 'default', 'enable' or 'disable'. If set to 'default', the value of the MySQL variable FOREIGN_KEY_CHECKS is used.

type

boolean

default

false

Warning

This is not a security measure as there will be always ways to circumvent this. If you want to prohibit users from dropping databases, revoke their corresponding DROP privilege.

Defines whether normal users (non-administrator) are allowed to delete their own database or not. If set as false, the link Drop Database will not be shown, and even a DROP DATABASE mydatabase will be rejected. Quite practical for ISP 's with many customers.

This limitation of SQL queries is not as strict as when using MySQL privileges. This is due to nature of SQL queries which might be quite complicated. So this choice should be viewed as help to avoid accidental dropping rather than strict privilege limitation.

type

boolean

default

true

Whether a warning ("Are your really sure...") should be displayed when you're about to lose data.

type

boolean

default

true

Define whether the "search string inside database" is enabled or not.

type

boolean

default

false

Define whether phpMyAdmin will continue executing a multi-query statement if one of the queries fails. Default is to abort execution.

type

boolean

default

true

Whether or not the drag and drop import feature is enabled. When enabled, a user can drag a file in to their browser and phpMyAdmin will attempt to import the file.

type

boolean

default

false

4.9.8

Define whether phpMyAdmin will encrypt sensitive data (like database name and table name) from the URL query string. Default is to not encrypt the URL query string.

type

string

default

''

4.9.8

A secret key used to encrypt/decrypt the URL query string. Should be 32 bytes long.

faq2_10

type

integer

default

500

Maximum number of rows retrieved for zoom search.

Cookie authentication options

type

string

default

''

The 'cookie' $cfg['Servers'][$i]['auth_type'] uses the Sodium extension to encrypt the cookies (see Cookie). If you are using the 'cookie' $cfg['Servers'][$i]['auth_type'], enter here a generated string of random bytes to be used as an encryption key. It will be used internally by the Sodium extension: you won't be prompted for this encryption key.

Since a binary string is usually not printable, it can be converted into a hexadecimal representation (using a function like sodium_bin2hex) and then used in the configuration file. For example:

// The string is a hexadecimal representation of a 32-bytes long string of random bytes.
$cfg['blowfish_secret'] = sodium_hex2bin('f16ce59f45714194371b48fe362072dc3b019da7861558cd4ad29e4d6fb13851');

Using a binary string is recommended. However, if all 32 bytes of the string are visible characters, then a function like sodium_bin2hex is not required. For example:

// A string of 32 characters.
$cfg['blowfish_secret'] = 'JOFw435365IScA&Q!cDugr!lSfuAz*OW';

Warning

The encryption key must be 32 bytes long. If it is longer than the length of bytes, only the first 32 bytes will be used, and if it is shorter, a new temporary key will be automatically generated for you. However, this temporary key will only last for the duration of the session.

Note

The configuration is called blowfish_secret for historical reasons as Blowfish algorithm was originally used to do the encryption.

3.1.0

Since version 3.1.0 phpMyAdmin can generate this on the fly, but it makes a bit weaker security as this generated secret is stored in session and furthermore it makes impossible to recall user name from cookie.

5.2.0

Since version 5.2.0, phpMyAdmin uses the sodium_crypto_secretbox and sodium_crypto_secretbox_open PHP functions to encrypt and decrypt cookies, respectively.

faq2_10

type

string

default

'Strict'

5.1.0

It sets SameSite attribute of the Set-Cookie HTTP response header. Valid values are:

• Lax
• Strict
• None

rfc6265 bis

type

boolean

default

true

Define whether the previous login should be recalled or not in cookie authentication mode.

This is automatically disabled if you do not have configured $cfg['blowfish_secret'].

type

integer [number of seconds]

default

1440

Define how long a login cookie is valid. Please note that php configuration option session.gc_maxlifetime might limit session validity and if the session is lost, the login cookie is also invalidated. So it is a good idea to set session.gc_maxlifetime at least to the same value of $cfg['LoginCookieValidity'].

type

integer [number of seconds]

default

0

Define how long login cookie should be stored in browser. Default 0 means that it will be kept for existing session. This is recommended for not trusted environments.

type

boolean

default

true

If enabled (default), logout deletes cookies for all servers, otherwise only for current one. Setting this to false makes it easy to forget to log out from other server, when you are using more of them.

type

boolean

default

false

If enabled, allows you to log in to arbitrary servers using cookie authentication.

Note

Please use this carefully, as this may allow users access to MySQL servers behind the firewall where your HTTP server is placed. See also $cfg['ArbitraryServerRegexp'].

type

string

default

''

Restricts the MySQL servers to which the user can log in when $cfg['AllowArbitraryServer'] is enabled by matching the IP or the hostname of the MySQL server to the given regular expression. The regular expression must be enclosed with a delimiter character.

It is recommended to include start and end symbols in the regular expression, so that you can avoid partial matches on the string.

Examples:

// Allow connection to three listed servers:
$cfg['ArbitraryServerRegexp'] = '/^(server|another|yetdifferent)$/';

// Allow connection to range of IP addresses:
$cfg['ArbitraryServerRegexp'] = '@^192\.168\.0\.[0-9]{1,}$@';

// Allow connection to server name ending with -mysql:
$cfg['ArbitraryServerRegexp'] = '@^[^:]\-mysql$@';

Note

The whole server name is matched, it can include port as well. Due to way MySQL is permissive in connection parameters, it is possible to use connection strings as `server:3306-mysql`. This can be used to bypass regular expression by the suffix, while connecting to another server.

type

string

default

'invisible'

Valid values are:

• 'invisible' Use an invisible captcha checking method;
• 'checkbox' Use a checkbox to confirm the user is not a robot.

5.0.3

type

string

default

'https://www.google.com/recaptcha/api.js'

5.1.0

The URL for the reCaptcha v2 service's API, either Google's or a compatible one.

type

string

default

'https://apis.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://ssl.gstatic.com/'

5.1.0

The Content-Security-Policy snippet (URLs from which to allow embedded content) for the reCaptcha v2 service, either Google's or a compatible one.

type

string

default

'g-recaptcha'

5.1.0

The request parameter used for the reCaptcha v2 service.

type

string

default

'g-recaptcha-response'

5.1.0

The response parameter used for the reCaptcha v2 service.

type

string

default

''

The public key for the reCaptcha service that can be obtained from the "Admin Console" on https://www.google.com/recaptcha/about/.

<https://developers.google.com/recaptcha/docs/v3>

reCaptcha will be then used in cookie.

4.1.0

type

string

default

''

The private key for the reCaptcha service that can be obtained from the "Admin Console" on https://www.google.com/recaptcha/about/.

<https://developers.google.com/recaptcha/docs/v3>

reCaptcha will be then used in cookie.

4.1.0

type

string

default

''

The URL for the reCaptcha service to do siteverify action.

reCaptcha will be then used in cookie.

5.1.0

Navigation panel setup

type

boolean

default

true

Defines whether to display databases in the navigation panel as a tree instead of in a dropdown selector.

type

integer

default

100

The number of first level databases that can be displayed on each page of navigation tree.

type

integer

default

50

The number of items (tables, columns, indexes) that can be displayed on each page of the navigation tree.

type

boolean

default

true

Defines whether to group the databases based on a common prefix in their name $cfg['NavigationTreeDbSeparator'].

type

string

default

'_'

The string used to separate the parts of the database name when showing them in a tree.

type

string or array

default

'__'

Defines a string to be used to nest table spaces. This means if you have tables like first__second__third this will be shown as a three-level hierarchy like: first > second > third. If set to false or empty, the feature is disabled. NOTE: You should not use this separator at the beginning or end of a table name or multiple times after another without any other characters in between.

type

integer

default

1

Defines how many sublevels should be displayed when splitting up tables by the above separator.

type

integer

default

10

The maximum number of recently used tables shown in the navigation panel. Set this to 0 (zero) to disable the listing of recent tables.

type

integer

default

10

The maximum number of favorite tables shown in the navigation panel. Set this to 0 (zero) to disable the listing of favorite tables.

type

boolean

default

true

Enables Zero Configuration mode in which the user will be offered a choice to create phpMyAdmin configuration storage in the current database or use the existing one, if already present.

This setting has no effect if the phpMyAdmin configuration storage database is properly created and the related configuration directives (such as $cfg['Servers'][$i]['pmadb'] and so on) are configured.

type

boolean

default

true

Defines whether or not to link with main panel by highlighting the current database or table.

type

boolean

default

true

Defines whether or not to display the phpMyAdmin logo at the top of the navigation panel.

type

string

default

'index.php'

Enter the URL where the logo in the navigation panel will point to. For use especially with self made theme which changes this. For relative/internal URLs, you need to have leading ./ or trailing characters ? such as './index.php?route=/server/sql?'. For external URLs, you should include URL protocol schemes (http or https) with absolute URLs.

You may want to make the link open in a new browser tab, for that you need to use $cfg['NavigationLogoLinkWindow']

type

string

default

'main'

Whether to open the linked page in the main window (main) or in a new one (new). Note: use new if you are linking to phpmyadmin.net.

To open the link in the main window you will need to add the value of $cfg['NavigationLogoLink'] to $cfg['CSPAllow'] because of the Content Security Policy header.

type

integer

default

30

Defines the minimum number of items (tables, views, routines and events) to display a JavaScript filter box above the list of items in the navigation tree.

To disable the filter completely some high number can be used (e.g. 9999)

type

integer

default

30

Defines the minimum number of databases to display a JavaScript filter box above the list of databases in the navigation tree.

To disable the filter completely some high number can be used (e.g. 9999)

type

boolean

default

true

Defines whether or not to display a server choice at the top of the navigation panel.

type

boolean

default

false

Defines whether to display this server choice as links instead of in a drop-down.

type

string

default

'structure'

Defines the tab displayed by default when clicking the small icon next to each table name in the navigation panel. The possible values are:

• structure
• sql
• search
• insert
• browse

type

string

default

null

Defines the tab displayed by default when clicking the second small icon next to each table name in the navigation panel. The possible values are:

• (empty)
• structure
• sql
• search
• insert
• browse

type

boolean

default

true

Whether to offer the possibility of tree expansion in the navigation panel.

type

boolean

default

true

Whether to show tables under database in the navigation panel.

type

boolean

default

true

Whether to show views under database in the navigation panel.

type

boolean

default

true

Whether to show functions under database in the navigation panel.

type

boolean

default

true

Whether to show procedures under database in the navigation panel.

type

boolean

default

true

Whether to show events under database in the navigation panel.

type

boolean

default

true

Whether to expand single database in the navigation tree automatically.

type

integer

default

240

Navigation panel width, set to 0 to collapse it by default.

Main panel

type

boolean

default

true

Defines whether or not to display space usage and statistics about databases and tables.

type

boolean|string

default

true

Defines whether to display detailed server information on main page. Possible values are:

• true to show all server information
• false to hide server information
• 'database-server' to show only database server information
• 'web-server' to show only web server information

You can additionally hide more information by using $cfg['Servers'][$i]['verbose'].

6.0.0 Added 'database-server' and 'web-server' options.

type

boolean

default

false

Defines whether to display the PHP information or not at the starting main (right) frame.

Please note that to block the usage of phpinfo() in scripts, you have to put this in your php.ini:

disable_functions = phpinfo()

Warning

Enabling phpinfo page will leak quite a lot of information about server setup. Is it not recommended to enable this on shared installations.

This might also make easier some remote attacks on your installations, so enable this only when needed.

type

boolean

default

true

Defines whether to display the Change password link or not at the starting main (right) frame. This setting does not check MySQL commands entered directly.

Please note that enabling the Change password link has no effect with config authentication mode: because of the hard coded password value in the configuration file, end users can't be allowed to change their passwords.

type

boolean

default

true

Defines whether to display the form for creating database or not at the starting main (right) frame. This setting does not check MySQL commands entered directly.

type

boolean

default

true

Defines whether to display information about the current Git revision (if applicable) on the main panel.

type

array

Defines the minimum supported MySQL version. The default is chosen by the phpMyAdmin team; however this directive was asked by a developer of the Plesk control panel to ease integration with older MySQL servers (where most of the phpMyAdmin features work).

Database structure

type

boolean

default

false

Defines whether to show a column displaying the charset for all tables in the database structure page.

type

boolean

default

false

Defines whether to show a column displaying the comments for all tables in the database structure page.

type

boolean

default

false

Defines whether the database structure page (tables list) has a "Creation" column that displays when each table was created.

type

boolean

default

false

Defines whether the database structure page (tables list) has a "Last update" column that displays when each table was last updated.

type

boolean

default

false

Defines whether the database structure page (tables list) has a "Last check" column that displays when each table was last checked.

type

boolean

default

true

Defines whether the table structure actions are hidden under a "More" drop-down.

type

boolean

default

true

Defines whether to show column comments as a column in the table structure view.

Browse mode

type

string

default

'icons'

Defines whether the table navigation links contain 'icons', 'text' or 'both'.

type

string

default

'both'

If set to icons, will display icons instead of text for db and table properties links (like Browse, Select, Insert, ...). Can be set to 'both' if you want icons AND text. When set to text, will only show text.

type

string

default

'both'

Whether to display icons or text or both icons and text in table row action segment. Value can be either of 'icons', 'text' or 'both'.

type

boolean

default

false

Defines whether a user should be displayed a "Show all" button in browse mode or not in all cases. By default it is shown only on small tables (less than 500 rows) to avoid performance issues while getting too many rows.

type

integer

default

25

Number of rows displayed when browsing a result set and no LIMIT clause is used. If the result set contains more rows, "Previous" and "Next" links will be shown. Possible values: 25,50,100,250,500.

type

string

default

'SMART'

Defines whether columns are displayed in ascending (ASC) order, in descending (DESC) order or in a "smart" (SMART) order - I.E. descending order for columns of type TIME, DATE, DATETIME and TIMESTAMP, ascending order else- by default.

3.4.0 Since phpMyAdmin 3.4.0 the default value is 'SMART'.

type

boolean

default

true

Defines whether the "Show binary contents as HEX" browse option is ticked by default.

3.3.0

4.3.0

This setting was removed.

type

string

default

'double-click'

Defines which action (double-click or click) triggers grid editing. Can be deactivated with the disabled value.

type

string

default

'K'

Defines the initial behavior for Options > Relational. K, which is the default, displays the key while D shows the display column.

type

boolean

default

false

Defines whether or not to save all edited cells at once for grid editing.

Editing mode

type

boolean or string

default

'blob'

Defines whether BLOB or BINARY columns are protected from editing when browsing a table's content. Valid values are:

• false to allow editing of all columns;
• 'blob' to allow editing of all columns except BLOBS;
• 'noblob' to disallow editing of all columns except BLOBS (the opposite of 'blob');
• 'all' to disallow editing of all BINARY or BLOB columns.

type

boolean

default

true

Defines whether or not MySQL functions fields should be initially displayed in edit/insert mode. Since version 2.10, the user can toggle this setting from the interface.

type

boolean

default

true

Defines whether or not type fields should be initially displayed in edit/insert mode. The user can toggle this setting from the interface.

type

integer

default

2

Defines the default number of rows to be entered from the Insert page. Users can manually change this from the bottom of that page to add or remove blank rows.

type

integer

default

100

If there are fewer items than this in the set of foreign keys, then a drop-down box of foreign keys is presented, in the style described by the $cfg['ForeignKeyDropdownOrder'] setting.

type

array

default

['content-id', 'id-content']

For the foreign key drop-down fields, there are several methods of display, offering both the key and value data. The contents of the array should be one or both of the following strings: content-id, id-content.

Export and import settings

type

boolean

default

true

type

boolean

default

true

type

boolean

default

true

Defines whether to allow the use of zip/GZip/BZip2 compression when creating a dump file

type

boolean

default

true

Defines whether to allow on the fly compression for GZip/BZip2 compressed exports. This doesn't affect smaller dumps and allows users to create larger dumps that won't otherwise fit in memory due to php memory limit. Produced files contain more GZip/BZip2 headers, but all normal programs handle this correctly.

type

array

default

[...]

In this array are defined default parameters for export, names of items are similar to texts seen on export page, so you can easily identify what they mean.

type

string

default

'sql'

Default export format.

type

string

default

'quick'

Defines how the export form is displayed when it loads. Valid values are:

• quick to display the minimum number of options to configure
• custom to display every available option to configure
• custom-no-form same as custom but does not display the option of using quick export

type

string

default

'none'

Default export compression method. Possible values are 'none', 'zip' or 'gzip'.

type

string

default

''

Defines charset for generated export. By default no charset conversion is done assuming UTF-8.

type

string

default

'@TABLE@'

Default filename template for table exports.

faq6_27

type

string

default

'@DATABASE@'

Default filename template for database exports.

faq6_27

type

string

default

'@SERVER@'

Default filename template for server exports.

faq6_27

type

boolean

default

false

Remove DEFINER clause from the event, view and routine definitions.

5.2.0

type

array

default

[...]

In this array are defined default parameters for import, names of items are similar to texts seen on import page, so you can easily identify what they mean.

type

string

default

''

Defines charset for import. By default no charset conversion is done assuming UTF-8.

type

array

default

[...]

type

string

default

'pdf'

Defines the default format for schema export. Possible values are 'pdf', 'eps', 'dia' or 'svg'.

Tabs display settings

type

string

default

'both'

Defines whether the menu tabs contain 'icons', 'text' or 'both'.

type

integer

default

1

How many columns will be utilized to display the tables on the database property view? When setting this to a value larger than 1, the type of the database will be omitted for more display space.

type

string

default

'welcome'

Defines the tab displayed by default on server view. The possible values are:

• welcome (recommended for multi-user setups)
• databases,
• status
• variables
• privileges

type

string

default

'structure'

Defines the tab displayed by default on database view. The possible values are:

• structure
• sql
• search
• operations

type

string

default

'browse'

Defines the tab displayed by default on table view. The possible values are:

• structure
• sql
• search
• insert
• browse

PDF Options

type

array

default

['A3', 'A4', 'A5', 'letter', 'legal']

Array of possible paper sizes for creating PDF pages.

You should never need to change this.

type

string

default

'A4'

Default page size to use when creating PDF pages. Valid values are any listed in $cfg['PDFPageSizes'].

Languages

type

string

default

'en'

Defines the default language to use, if not browser-defined or user-defined. The corresponding language file needs to be in locale/*code*/LC_MESSAGES/phpmyadmin.mo.

type

string

default

'utf8mb4_general_ci'

Defines the default connection collation to use, if not user-defined. See the MySQL documentation for charsets for list of possible values.

type

string

default

not set

Force language to use. The corresponding language file needs to be in locale/*code*/LC_MESSAGES/phpmyadmin.mo.

type

string

default

''

Limit list of available languages to those matching the given regular expression. For example if you want only Czech and English, you should set filter to '^(cs|en)'.

type

string

default

'auto'

You can select here which functions will be used for character set conversion. Possible values are:

• 'auto' - automatically use available one (first is tested iconv, then mbstring)
• 'iconv' - use iconv or libiconv functions
• 'mb' - use mbstring extension
• 'none' - disable encoding conversion

Enabled charset conversion activates a pull-down menu in the Export and Import pages, to choose the character set when exporting a file. The default value in this menu comes from $cfg['Export']['charset'] and $cfg['Import']['charset'].

6.0.0

Support for the Recode extension has been removed. The 'recode' value is ignored and the default value ('auto') is used instead.

type

string

default

'//TRANSLIT'

Specify some parameters for iconv used in charset conversion. See iconv documentation for details. By default //TRANSLIT is used, so that invalid characters will be transliterated.

type

array [list of strings]

default

[...]

Available character sets for MySQL conversion. You can add your own (any of supported by mbstring/iconv) or remove these which you don't use. Character sets will be shown in same order as here listed, so if you frequently use some of these move them to the top.

Example configuration:

$cfg['AvailableCharsets'] = ['utf-8', 'iso-8859-1'];

Web server settings

type

string/boolean

default

'auto'

Defines whether to use GZip output buffering for increased speed in HTTP transfers. Set to true/false for enabling/disabling. When set to 'auto' (string), phpMyAdmin tries to enable output buffering and will automatically disable it if your browser has some problems with buffering. IE6 with a certain patch is known to cause data corruption when having enabled buffering.

6.0.0

This setting was removed.

type

array

default

[]

Lists proxies and HTTP headers which are trusted for $cfg['Servers'][$i]['AllowDeny']['order']. This list is by default empty, you need to fill in some trusted proxy servers if you want to use rules for IP addresses behind proxy.

The following example specifies that phpMyAdmin should trust a HTTP_X_FORWARDED_FOR (X-Forwarded-For) header coming from the proxy 1.2.3.4:

$cfg['TrustedProxies'] = ['1.2.3.4' => 'HTTP_X_FORWARDED_FOR'];

The $cfg['Servers'][$i]['AllowDeny']['rules'] directive uses the client's IP address as usual.

type

string

default

'auto'

Specifies whether GD >= 2 is available. If yes it can be used for MIME transformations. Possible values are:

• auto - automatically detect
• yes - GD 2 functions can be used
• no - GD 2 function cannot be used

type

boolean

default

true

We normally check the permissions on the configuration file to ensure it's not world writable. However, phpMyAdmin could be installed on a NTFS filesystem mounted on a non-Windows server, in which case the permissions seems wrong but in fact cannot be detected. In this case a sysadmin would set this parameter to false.

type

integer

default

1000

Limit for length of URL in links. When length would be above this limit, it is replaced by form with button. This is required as some web servers (IIS) have problems with long URL.

type

string

default

''

Additional string to include in allowed script and image sources in Content Security Policy header.

This can be useful when you want to include some external JavaScript files in config.footer.inc.php or config.header.inc.php, which would be normally not allowed by Content Security Policy.

To allow some sites, just list them within the string:

$cfg['CSPAllow'] = 'example.com example.net';

4.0.4

type

boolean

default

false

In the database Structure page, it's possible to mark some tables then choose an operation like optimizing for many tables. This can slow down a server; therefore, setting this to true prevents this kind of multiple maintenance operation.

Theme settings

Please directly modify themes/themename/scss/_variables.scss, although your changes will be overwritten with the next update.

Design customization

type

boolean

default

true

When set to true, hovering over an item in the navigation panel causes that item to be marked (the background is highlighted).

type

boolean

default

true

When set to true, hovering over a row in the Browse page causes that row to be marked (the background is highlighted).

type

boolean

default

true

When set to true, a data row is marked (the background is highlighted) when the row is selected with the checkbox.

type

integer

default

50

Maximum number of characters shown in any non-numeric field on browse view. Can be turned off by a toggle button on the browse page.

type

string

default

'left'

Defines the place where table row links (Edit, Copy, Delete) would be put when tables contents are displayed (you may have them displayed at the left side, right side, both sides or nowhere).

type

boolean

default

false

Defines whether to show row links (Edit, Copy, Delete) and checkboxes for multiple row operations even when the selection does not have a unique key. Using row actions in the absence of a unique key may result in different/more rows being affected since there is no guaranteed way to select the exact row(s).

type

boolean

default

true

If enabled, remember the sorting of each table when browsing them.

type

string

default

'NONE'

This defines the default sort order for the tables, having a primary key, when there is no sort order defines externally. Possible values are:

• NONE
• ASC
• DESC

type

boolean

default

true

type

boolean

default

true

By setting the corresponding variable to true you can enable the display of column comments in Browse or Property display. In browse mode, the comments are shown inside the header. In property mode, comments are displayed using a CSS-formatted dashed-line below the name of the column. The comment is shown as a tool-tip for that column.

type

integer

default

0

This will define the first day of week in the calendar. The number can be set from 0 to 6, which represents the seven days of the week, Sunday to Saturday respectively. This value can also be configured by the user in Settings -> Features -> General -> First day of calendar field.

Text fields

type

string

default

'input'

Defines which type of editing controls should be used for CHAR and VARCHAR columns. Applies to data editing and also to the default values in structure editing. Possible values are:

• input - this allows to limit size of text to size of columns in MySQL, but has problems with newlines in columns
• textarea - no problems with newlines in columns, but also no length limitations

type

integer

default

4

Defines the minimum size for input fields generated for CHAR and VARCHAR columns.

type

integer

default

60

Defines the maximum size for input fields generated for CHAR and VARCHAR columns.

type

integer

default

40

type

integer

default

15

type

integer

default

40

type

integer

default

7

Number of columns and rows for the textareas. This value will be emphasized (*2) for SQL query textareas and (*1.25) for SQL textareas inside the query window.

The Char* values are used for CHAR and VARCHAR editing (if configured via $cfg['CharEditing']).

5.0.0

The default value was changed from 2 to 7.

type

boolean

default

true

Defines whether textarea for LONGTEXT columns should have double size.

type

boolean

default

false

Defines if the whole textarea of the query box will be selected on click.

type

boolean

default

true

Whether to enable autocomplete for table and column names in any SQL query box.

SQL query box settings

type

boolean

default

true

Whether to display an edit link to change a query in any SQL Query box.

type

boolean

default

true

Whether to display a link to explain a SELECT query in any SQL Query box.

type

boolean

default

true

Whether to display a link to wrap a query in PHP code in any SQL Query box.

type

boolean

default

true

Whether to display a link to refresh a query in any SQL Query box.

Web server upload/save/import directories

If PHP is running in safe mode, all directories must be owned by the same user as the owner of the phpMyAdmin scripts.

If the directory where phpMyAdmin is installed is subject to an open_basedir restriction, you need to create a temporary directory in some directory accessible by the PHP interpreter.

For security reasons, all directories should be outside the tree published by webserver. If you cannot avoid having this directory published by webserver, limit access to it either by web server configuration (for example using .htaccess or web.config files) or place at least an empty index.html file there, so that directory listing is not possible. However as long as the directory is accessible by web server, an attacker can guess filenames to download the files.

type

string

default

''

The name of the directory where SQL files have been uploaded by other means than phpMyAdmin (for example, FTP). Those files are available under a drop-down box when you click the database or table name, then the Import tab.

If you want different directory for each user, %u will be replaced with username.

Please note that the file names must have the suffix ".sql" (or ".sql.bz2" or ".sql.gz" if support for compressed formats is enabled).

This feature is useful when your file is too big to be uploaded via HTTP, or when file uploads are disabled in PHP.

Warning

Please see top of this chapter (web-dirs) for instructions how to setup this directory and how to make its usage secure.

See faq1_16 for alternatives.

type

string

default

''

The name of the webserver directory where exported files can be saved.

If you want a different directory for each user, %u will be replaced with the username.

Please note that the directory must exist and has to be writable for the user running webserver.

Warning

Please see top of this chapter (web-dirs) for instructions how to setup this directory and how to make its usage secure.

type

string

default

'./tmp/'

The name of the directory where temporary files can be stored. It is used for several purposes, currently:

• The templates cache which speeds up page loading.
• ESRI Shapefiles import, see faq6_30.
• To work around limitations of open_basedir for uploaded files, see faq1_11.

This directory should have as strict permissions as possible as the only user required to access this directory is the one who runs the webserver. If you have root privileges, simply make this user owner of this directory and make it accessible only by it:

chown www-data:www-data tmp
chmod 700 tmp

If you cannot change owner of the directory, you can achieve a similar setup using ACL:

chmod 700 tmp
setfacl -m "g:www-data:rwx" tmp
setfacl -d -m "g:www-data:rwx" tmp

If neither of above works for you, you can still make the directory chmod 777, but it might impose risk of other users on system reading and writing data in this directory.

Warning

Please see top of this chapter (web-dirs) for instructions how to setup this directory and how to make its usage secure.

Various display setting

type

integer

default

100

Repeat the headers every X cells, or 0 to deactivate.

type

boolean

default

true

Feature request to add a pop-up window back

4.3.0

This setting was removed.

type

integer

default

550

4.3.0

This setting was removed.

type

integer

default

310

4.3.0

This setting was removed.

type

boolean

default

false

type

string

default

'sql'

4.3.0

This setting was removed.

type

integer

default

25

If $cfg['QueryHistoryDB'] is set to true, all your Queries are logged to a table, which has to be created by you (see $cfg['Servers'][$i]['history']). If set to false, all your queries will be appended to the form, but only as long as your window is opened they remain saved.

When using the JavaScript based query window, it will always get updated when you click on a new table/db to browse and will focus if you click on Edit SQL after using a query. You can suppress updating the query window by checking the box Do not overwrite this query from outside the window below the query textarea. Then you can browse tables/databases in the background without losing the contents of the textarea, so this is especially useful when composing a query with tables you first have to look in. The checkbox will get automatically checked whenever you change the contents of the textarea. Please uncheck the button whenever you definitely want the query window to get updated even though you have made alterations.

If $cfg['QueryHistoryDB'] is set to true you can specify the amount of saved history items using $cfg['QueryHistoryMax'].

type

boolean

default

true

6.0.0

Allow users to create bookmarks that are available for all other users

type

boolean

default

true

Enable transformations.

type

integer

default

50000

For InnoDB tables, determines for how large tables phpMyAdmin should get the exact row count using SELECT COUNT. If the approximate row count as returned by SHOW TABLE STATUS is smaller than this value, SELECT COUNT will be used, otherwise the approximate count will be used.

4.8.0

The default value was lowered to 50000 for performance reasons.

4.2.6

The default value was changed to 500000.

faq3_11

type

integer

default

0

For VIEWs, since obtaining the exact count could have an impact on performance, this value is the maximum to be displayed, using a SELECT COUNT ... LIMIT. Setting this to 0 bypasses any row counting.

type

boolean

default

true

Sorts database, table names and foreign key constaint according to natural order (for example, t1, t2, t10). Currently implemented in the navigation panel, in Database view for the table list and Relation view while listing Foreign key constraints.

type

string

default

'closed'

If set to 'closed', the visual sliders are initially in a closed state. A value of 'open' does the reverse. To completely disable all visual sliders, use 'disabled'.

type

array

default

[]

Contains names of configuration options (keys in $cfg array) that users can't set through user preferences. For possible values, refer to classes under src/Config/Forms/User/.

type

boolean

default

false

3.4.0

Activates in the user preferences a tab containing options for developers of phpMyAdmin.

Page titles

The page title displayed by your browser's window or tab title bar can be customized. You can use faq6_27. The following four options allow customizing various parts of the phpMyAdmin interface. Note that the login page title cannot be changed.

type

string

default

'@HTTP_HOST@ / @VSERVER@ / @DATABASE@ / @TABLE@ | @PHPMYADMIN@'

type

string

default

'@HTTP_HOST@ / @VSERVER@ / @DATABASE@ | @PHPMYADMIN@'

type

string

default

'@HTTP_HOST@ / @VSERVER@ | @PHPMYADMIN@'

type

string

default

'@HTTP_HOST@ | @PHPMYADMIN@'

Theme manager settings

type

boolean

default

true

Enables user-selectable themes. See faqthemes.

type

string

default

'pmahomme'

The default theme (a subdirectory under ./public/themes/).

type

boolean

default

false

Whether to allow different theme for each server.

type

string

default

'82%'

5.0.0

This setting was removed as the browser is more efficient, thus no need of this option.

Font size to use, is applied in CSS.

Default queries

type

string

default

'SELECT * FROM @TABLE@ WHERE 1'

type

string

default

''

Default queries that will be displayed in query boxes when user didn't specify any. You can use standard faq6_27.

MySQL settings

type

array

default

['FUNC_CHAR' => '', 'FUNC_DATE' => '', 'FUNC_NUMBER' => '', 'FUNC_SPATIAL' => 'GeomFromText', 'FUNC_UUID' => 'UUID', 'first_timestamp' => 'NOW']

Functions selected by default when inserting/changing row, Functions are defined for meta types as (FUNC_NUMBER, FUNC_DATE, FUNC_CHAR, FUNC_SPATIAL, FUNC_UUID) and for first_timestamp, which is used for first timestamp column in table.

Example configuration

$cfg['DefaultFunctions'] = [
    'FUNC_CHAR' => '',
    'FUNC_DATE' => '',
    'FUNC_NUMBER' => '',
    'FUNC_SPATIAL' => 'ST_GeomFromText',
    'FUNC_UUID' => 'UUID',
    'first_timestamp' => 'UTC_TIMESTAMP',
];

Default options for Transformations

type

array

default

An array with below listed key-values

type

array

default

[0, 'all', '…']

type

array

default

['T', 'F']

type

array

default

[0, '-f /dev/null -i -wrap -q', 1, 1]

type

array

default

['', '']

type

array

default

['2']

type

array

default

[0, '', 'local']

type

array

default

['100', 100]

type

array

default

['', 100, 50]

type

array

default

['', '', '']

Console settings

Note

These settings are mostly meant to be changed by user.

type

boolean

default

false

Show query history at start

type

boolean

default

false

Always expand query messages

type

boolean

default

true

Show current browsing query

type

boolean

default

false

Execute queries on Enter and insert new line with Shift+Enter

type

boolean

default

false

Switch to dark theme

type

string

default

'info'

Console mode

type

integer

default

92

Console height

Developer

Warning

These settings might have huge effect on performance or security.

type

string

default

'production'

Sets the working environment.

This only needs to be changed when you are developing phpMyAdmin itself. The development mode may display debug information in some places.

Possible values are 'production' or 'development'.

type

array

default

[]

type

boolean

default

false

Enable logging queries and execution times to be displayed in the console's Debug SQL tab.

type

boolean

default

false

Enable logging of queries and execution times to the syslog. Requires $cfg['DBG']['sql'] to be enabled.

type

boolean

default

false

Enable to let server present itself as demo server. This is used for phpMyAdmin demo server.

It currently changes following behavior:

• There is welcome message on the main page.
• There is footer information about demo server and used Git revision.
• The setup script is enabled even with existing configuration.
• The setup does not try to connect to the MySQL server.

type

boolean

default

false

Can be used for testing two-factor authentication using simple2fa.

Examples

See following configuration snippets for typical setups of phpMyAdmin.

Basic example

Example configuration file, which can be copied to config.inc.php to get some core configuration layout; it is distributed with phpMyAdmin as config.sample.inc.php. Please note that it does not contain all configuration options, only the most frequently used ones.

../config.sample.inc.php

Warning

Don't use the controluser 'pma' if it does not yet exist and don't use 'pmapass' as password.

Example for signon authentication

This example uses examples/signon.php to demonstrate usage of auth_signon:

<?php
$i = 0;
$i++;
$cfg['Servers'][$i]['auth_type']     = 'signon';
$cfg['Servers'][$i]['SignonSession'] = 'SignonSession';
$cfg['Servers'][$i]['SignonURL']     = 'examples/signon.php';

Example for IP address limited autologin

If you want to automatically login when accessing phpMyAdmin locally while asking for a password when accessing remotely, you can achieve it using following snippet:

if ($_SERVER['REMOTE_ADDR'] === '127.0.0.1') {
    $cfg['Servers'][$i]['auth_type'] = 'config';
    $cfg['Servers'][$i]['user'] = 'root';
    $cfg['Servers'][$i]['password'] = 'yourpassword';
} else {
    $cfg['Servers'][$i]['auth_type'] = 'cookie';
}

Note

Filtering based on IP addresses isn't reliable over the internet, use it only for local address.

Example for using multiple MySQL servers

You can configure any number of servers using $cfg['Servers'], following example shows two of them:

<?php
// The string is a hexadecimal representation of a 32-bytes long string of random bytes.
$cfg['blowfish_secret'] = sodium_hex2bin('f16ce59f45714194371b48fe362072dc3b019da7861558cd4ad29e4d6fb13851');
$i = 0;

$i++; // server 1 :
$cfg['Servers'][$i]['auth_type'] = 'cookie';
$cfg['Servers'][$i]['verbose']   = 'no1';
$cfg['Servers'][$i]['host']      = 'localhost';
// more options for #1 ...

$i++; // server 2 :
$cfg['Servers'][$i]['auth_type'] = 'cookie';
$cfg['Servers'][$i]['verbose']   = 'no2';
$cfg['Servers'][$i]['host']      = 'remote.host.addr';//or ip:'10.9.8.1'
// this server must allow remote clients, e.g., host 10.9.8.%
// not only in mysql.host but also in the startup configuration
// more options for #2 ...

// end of server sections
$cfg['ServerDefault'] = 0; // to choose the server on startup

// further general options ...

Google Cloud SQL with SSL

To connect to Google Could SQL, you currently need to disable certificate verification. This is caused by the certificate being issued for CN matching your instance name, but you connect to an IP address and PHP tries to match these two. With verification you end up with error message like:

Peer certificate CN=`api-project-851612429544:pmatest' did not match expected CN=`8.8.8.8'

Warning

With disabled verification your traffic is encrypted, but you're open to man in the middle attacks.

To connect phpMyAdmin to Google Cloud SQL using SSL download the client and server certificates and tell phpMyAdmin to use them:

// IP address of your instance
$cfg['Servers'][$i]['host'] = '8.8.8.8';
// Use SSL for connection
$cfg['Servers'][$i]['ssl'] = true;
// Client secret key
$cfg['Servers'][$i]['ssl_key'] = '../client-key.pem';
// Client certificate
$cfg['Servers'][$i]['ssl_cert'] = '../client-cert.pem';
// Server certification authority
$cfg['Servers'][$i]['ssl_ca'] = '../server-ca.pem';
// Disable SSL verification (see above note)
$cfg['Servers'][$i]['ssl_verify'] = false;

ssl, $cfg['Servers'][$i]['ssl'], $cfg['Servers'][$i]['ssl_key'], $cfg['Servers'][$i]['ssl_cert'], $cfg['Servers'][$i]['ssl_ca'], $cfg['Servers'][$i]['ssl_verify'], <https://bugs.php.net/bug.php?id=72048>

Amazon RDS Aurora with SSL

To connect phpMyAdmin to an Amazon RDS Aurora MySQL database instance using SSL, download the CA server certificate and tell phpMyAdmin to use it:

// Address of your instance
$cfg['Servers'][$i]['host'] = 'replace-me-cluster-name.cluster-replace-me-id.replace-me-region.rds.amazonaws.com';
// Use SSL for connection
$cfg['Servers'][$i]['ssl'] = true;
// You need to have the region CA file and the authority CA file (2019 edition CA for example) in the PEM bundle for it to work
$cfg['Servers'][$i]['ssl_ca'] = '../rds-combined-ca-bundle.pem';
// Enable SSL verification
$cfg['Servers'][$i]['ssl_verify'] = true;

ssl, $cfg['Servers'][$i]['ssl'], $cfg['Servers'][$i]['ssl_ca'], $cfg['Servers'][$i]['ssl_verify']

• Current RDS CA bundle for all regions https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem
• The RDS CA (2019 edition) for the region eu-west-3 without the parent CA https://s3.amazonaws.com/rds-downloads/rds-ca-2019-eu-west-3.pem
• List of available Amazon RDS CA files
• Amazon MySQL Aurora security guide
• Amazon certificates bundles per region

reCaptcha using hCaptcha

$cfg['CaptchaApi'] = 'https://js.hcaptcha.com/1/api.js';
$cfg['CaptchaCsp'] = 'https://hcaptcha.com https://*.hcaptcha.com';
$cfg['CaptchaRequestParam'] = 'h-captcha';
$cfg['CaptchaResponseParam'] = 'h-captcha-response';
$cfg['CaptchaSiteVerifyURL'] = 'https://hcaptcha.com/siteverify';
// This is the secret key from hCaptcha dashboard
$cfg['CaptchaLoginPrivateKey'] = '0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx';
// This is the site key from hCaptcha dashboard
$cfg['CaptchaLoginPublicKey'] = 'xxx-xxx-xxx-xxx-xxxx';

hCaptcha website

hCaptcha Developer Guide

reCaptcha using Turnstile

$cfg['CaptchaMethod'] = 'checkbox';
$cfg['CaptchaApi'] = 'https://challenges.cloudflare.com/turnstile/v0/api.js';
$cfg['CaptchaCsp'] = 'https://challenges.cloudflare.com https://static.cloudflareinsights.com';
$cfg['CaptchaRequestParam'] = 'cf-turnstile';
$cfg['CaptchaResponseParam'] = 'cf-turnstile-response';
$cfg['CaptchaLoginPublicKey'] = '0xxxxxxxxxxxxxxxxxxxxxx';
$cfg['CaptchaLoginPrivateKey'] = '0x4AAAAAAAA_xx_xxxxxxxxxxxxxxxxxxxx';
$cfg['CaptchaSiteVerifyURL'] = 'https://challenges.cloudflare.com/turnstile/v0/siteverify';

Cloudflare Dashboard

Turnstile Developer Guide

reCaptcha using Google reCaptcha v2/v3

$cfg['CaptchaLoginPublicKey'] = 'xxxxxxxxxxxxxxxx-xxxxxxxxxxxx';
$cfg['CaptchaLoginPrivateKey'] = 'xxxxxxxxx-xxxxxxxxxxxxxx';
// Remove it if you dot not want the checkbox mode
$cfg['CaptchaMethod'] = 'checkbox';

Google reCaptcha Developer's Guide

Google reCaptcha types