Adding security warnings to mysql-backup

mezzoblue · Apr 18, 2011 · 66fc9e8 · 66fc9e8
1 parent 39140ba
commit 66fc9e8
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/PHP/mysql-backup/backup.php b/PHP/mysql-backup/backup.php
@@ -167,6 +167,7 @@ function listDBs($connection) {
 	if (!$backupResult) {
 ?>
 	<p>This script will backup the MySQL database of your choice to a flat file.</p>
+	<p>Warning: this script is dangerous to leave sitting on a server as it provides access to your internal DB server to anyone who knows where to look. Protecting this script with <a href="http://php.net/manual/en/features.http-auth.php">HTTP Authentication</a> should be considered mandatory, but better security is highly recommended.</p>
 
 	<form method="post" action="./backup.php">
 		<div>

diff --git a/PHP/mysql-backup/restore.php b/PHP/mysql-backup/restore.php
@@ -152,6 +152,7 @@ function listDBs($connection) {
 	if (!$restoreResult) {
 ?>
 	<p>This script will import a previously backed-up MySQL database file to the server.</p>
+	<p>Warning: this script is dangerous to leave sitting on a server as it provides access to your internal DB server to anyone who knows where to look. Protecting this script with <a href="http://php.net/manual/en/features.http-auth.php">HTTP Authentication</a> should be considered mandatory, but better security is highly recommended.</p>
 
 	<form method="post" action="./restore.php" enctype="multipart/form-data">
 		<div>