This software is an online database to register chemicals products in a research lab. Very simple, user-friendly, and easy to maintain. Requires a server with Apache, Php and MySql. User identification can be made via LDAP or Shibboleth.
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
Layout
auth
demo_version
LICENSE
about.php
ask_request.php
begin.php
begin_about.php
begin_contact.php
close_db.php
connect_db.php
contact.php
delete_item.php
delete_supplier.php
edit_item.php
edit_location.php
edit_supplier.php
edit_type.php
end.php
footer.php
functions_php.php
head.php
header.php
header_about.php
header_contact.php
index.php
install.php
install_submit.php
localsettings.php.sample
logo.png
modify_item.php
modify_location.php
modify_supplier.php
modify_template.php
modify_type.php
new_item.php
process_request.php
process_uploaded_files.php
read_post_data_item.php
read_post_upload_item.php
readme.txt
script_choice.php
script_choice_search.php
search_item.php
select_month.php
select_year.php
show_item.php
show_location.php
show_supplier.php
show_type.php
sidebar.php
submit_item.php
submit_template.php
switch_modify_item.php
switch_submit_item.php

readme.txt

by Nicolas Chiaruttini, 08/2011

I\ Installing ChemLabDatabase
====================================
Prerequisite.
* Having a server (yourserver) with the following software installed:
	- Apache2,
	- MySql, (You'll have to know the server, username and password for this database)
	- PhP
* Unzip ChemLabDatabase.zip in the folder you what in the server
* Type http://yourserver/folder/ChemLabDatabase/install.php
* Specify the required informations

II\ Changing authentification method
======================================
Three authentification methods have been tested. They all require customisation in order to work properly in a lab.

II-1\ IPs filtering
-------------------------

II-2\ LDAP Authentification
----------------------------

II-3\ Shibboleth Authentification
----------------------------------


III\ Security issues
======================================

* It is compulsory to make regular backup of the database. Anything can happen (software or hardware problem)

* The software is not completely sql-injection safe. If you discover some security issue, please contact the author.

* It is possible to upload msds sheets and informations sheets in the database. However right now this downloading is not really secured, since any file can be uploaded. However every file is rename to .pdf file, preventing its execution as a php file. As a second check, be sure that the .htaccess file is properly working and that you cannot list the directory.

IV\ Using ChemLabDatabase with multiple labs.
==============================================

This is possible but has several requirements :
* Administration is not fully possible without phpMyAdmin, so please install it.

* Rights managements are very basic, meaning that every people will have the possibility to search in the database of every lab. Only informations about the location of the product is hidden when the product does not belong to the user's lab.

How to add a lab?
* Go to phpMyAdmin
* Add the new lab to the lab table (only specify the name)
* In the sidebar.php, add where appriopriate the option to browse the new lab
* Modify the auth.php file to allow access for the people from the new lab
* Be sure that the same lab name is used in the auth.php file and in the database:  i.e. the variable $LABO_USER should be equal to lab.name for correct identification. To check that, compare the lab.name field in the database with phpmyadmin with an echo <? echo $LABO_USER; ?> inserted at the end of auth.php.

V\ Troubleshooting
------------------------------------------------

If you cannot upload msds or information sheets, be sure that the proper administrative rights are set in the msds and Information Sheets folders.

VI\ Bugs :

* Impossible to upload file if a new element (location, type,...) is entered while filling the product
* Need a better handling of uploaded file