Live data from Hacker News

Bike - phpMyAdmin replacement for geeks

webcheatsheet.com

11–20 of 47 posts

Re: Bike - phpMyAdmin replacement for geeks

#12
I often see systematic scans for phpmyadmin installations in my weblogs. phpmyadmin has had a series of security issues.

New software, new bugs.

I am not very confident that the bike developers will have an eye on security, since there are a couple of spelling errors on the site and they brag about how good looking and ajaxy the software is. Wrong focus.

Re: Bike - phpMyAdmin replacement for geeks

#13
Adminer [http://www.adminer.org/en/] is a pretty sweet db administration tool. It's only one sub-300kB file with no installation or configuration (so if your hosting provider doesnt have any db tool you can upload yours in seconds), supports MySQL, SQLite, PostgreSQL and others, and does much more. I didn't had to use phpMyAdmin even once since I learned about this.

One "killer" feature for me: Adminer automatically links items in columns that have foreign keys set, so you can click on a value and it jumps to that item in linked table.

Re: Bike - phpMyAdmin replacement for geeks

#14
If you go to their github page it says the following under security: "On current stage I don't care about login functionality. Put Bike into folder with name like 'tASTDKUWYVEjhas' or just use Apache httpauth as workaround."

So basically... they have absolutely nothing built in for security, other than hoping you choose a good folder name. Even if you ignore that, this is an all-around poor attempt to be an alternative, let alone compete.

UPDATE: Looks like the Bike developer is not trying to be an 'alternative' to phpMyAdmin and whomever made this post either used bad info or think it's an alternative themselves. Either way the guy says it's just supposed to be a lightweight and simple tool... not any sort of alternative. With that said, it's not so bad... but still, security needs to be a higher focus if this thing can access/modify your database.

Re: Bike - phpMyAdmin replacement for geeks

#15
post #13

Adminer [ http://www.adminer.org/en/ ] is a pretty sweet db administration tool. It's only one sub-300kB file with no installation or configuration (so if your hosting provider doesnt have any db tool you can upload yours in seconds), supports MySQL, SQLite, PostgreSQL and others, and does much more. I didn't had to use phpMyAdmin even once since I learned about this. One "killer" feature for me: Adminer automaticall…

phpMyAdmin has that feature as well. I noticed it a few weeks ago as I've never paid much attention to it, but it's there and it works.

Re: Bike - phpMyAdmin replacement for geeks

#16
dumb title - if it was phpMyAdmin for geeks I would say it should have more features, not less.

Looks nice - but as most of you said, there are far better options for handling this. If you are using MySQL and like some "nice tool", the MySQL workbench supports tunneling directly.

Re: Bike - phpMyAdmin replacement for geeks

#18

I'm not sure which, but Bike either selling itself short, or overexaggerating it's abilities by comparing it to phpMyAdmin like this.

It's not, if you look at the github page they make no such claims and actually say it's a small tool. whomever made this post is the one saying it's an alternative.

Re: Bike - phpMyAdmin replacement for geeks

#19
post #6

The issue behind phpMyAdmin IMHO neither is the fact that it's written in PHP nor that it looks unsexy. The problem is that it exists. It's too tempting to leave it running on some server and promptly forget it. Or get it installed without knowing by some third-party CMS. Even if it had a spotless security track record (it doesn't), this is just too big an attack surface. MySQL and especially Postgres have really goo…

So wouldn't you just setup a simple secure tunnel and run this on your local dev machine (with key-auth and an ssh agent to manage the connections)?

That's how I run my phpAdmin. No server security issues.

Re: Bike - phpMyAdmin replacement for geeks

#20
post #10

Earlier quoted context omitted.

I couldnt agree more, setting up Bike on every other server gives you the same maintenance headache(perhaps a little simpler) as having a version of phpMyAdmin on each. I just yesterday wrote a blogpost about tunneling mysql and using a locally hosted phpMyAdmin for those needs. That will give you the benefit of having phpMyAdmin at one place and you'll be motivated to keep that updated and properly configured. http:…

A bit of topic, but wasn't tm the expensive tld which you need to register for 10 years? When no can you tell me where you registered yours?

Yeah, it is, but I have a long commitment to my last name. :)
Post reply on HN