housamz / php-mysql-admin-panel-generator Goto Github PK

PHP MySQL Admin-panel Generator (MAGE), a PHP tool that helps you create a PHP CRUD system for any MySQL database in seconds.

License: Apache License 2.0

PHP 72.14% CSS 8.53% HTML 0.06% Hack 19.27%

mysql php mysql-database database crud-application crud content-management cms hacktoberfest hacktoberfest2020

php-mysql-admin-panel-generator's Introduction

MAGE :: PHP MySQL Admin Panel Generator

Available for Python also: Python Mage

PHP MySQL Admin Panel Generator (MAGE), a PHP tool that helps you create a PHP Admin Panel for any MySQL database in seconds.

Mage is not PHPMyAdmin; it doesn't contain all your databases. It physically creates an admin panel for a database.

A suggested use-case for the tool would be creating an admin panel for a PHP / MySQL project in seconds, and then you can tweak it before delivery.

You may use this tool for charity or school projects, for commercial use, please contact me.

Name

MAGE is derived from MySql Admin panel GEnerator. Mage (meɪdʒ): a magician or learned person.

Disclaimer: Always backup your database.

Instructions:

Note: You need to make sure that you have php-mysql package that connects PHP with MySQL, and that you change the generated directory permissions to be 777.

Step	Thumb	Instructions
1		Start by providing your MySQL Server Info, then click Next Step button.
2		The tool will scan the server for available databases and list them in a dropdown menu, select the database that you want, then check if you need full HTML editor or not, and then click "Generate Admin Panel" button
3		After a few seconds, you'll get a success message, with a link to the newly created admin panel, and a report of all the operations that were done.
4		Click the link to the admin panel. You have to sign in using "admin" as an email and a password.

You'll get a clean bootstrap interface to control the website, check below screenshots:

Notes

MAGE handles data using htmlentities as well as addslashes to prevent XSS attacks. This means that any HTML tags, especially those generated by the CKEditor, will be encoded.
If you want to display the original HTML code use html_entity_decode() around that specific field.
If you don't need HTML tags at all, you can disable CKEditor by unchecking the checkbox before clicking "Generate Admin Panel".

Debugging:

Nothing happens when you provide credentials on home page

You need to install php-mysql package, the following installs the latest version.

sudo apt install php-mysql
service apache2 restart

Nothing happens when I click Generate button

Change the generated directory permission to 777

chmod 777 generated

php-mysql-admin-panel-generator's People

Contributors

Stargazers

Watchers

Forkers

tomboasy adilmuneeb repairoffice oliynyk rajkumarpb iftakharhossain moonlitejm cregcox satriobw kleidsonfriend saku-xyz amirhf1 tejkweku socketpy divyavrat zwmyint djuanmurcia pardeep-web-designer josephjlee ferid60433 baddot atalrefai domin8-iptv admcilgin a1f6bs johnmatiko zartata hbender66 kobaniasmar pmbranco m0pfin juancarlosromeroc simhaonline franco77 biangkerok32 master-collider investbanks therealelyayo 2boubacar10 aysadkozanoglu dineshkummarc puji476 naya-aastra lukesqly thisismegopi thecodeline maraiba deepak3d tugkann abdullahkhanwork 5l1v3r1 azrabash tomiokaa knabb215 ibrahimfarukince gjhack vyxerzone ahmadfikrimasyhur seshuhub stephorc johnmahugu jeandev84 moradnajem a3essa catwhocode mrinmoy29a stormcloudtech axoblade edwinmasri barbozzza5 codecrusaderplus idaliagmz masihgurutkj ybcddsrs7z drascom doxuanhop curthowell 0x0000017

php-mysql-admin-panel-generator's Issues

amazing

i try your project and it is amazing easy. it is very useful to start simple projects and can be extended easly

see picture
https://i.ibb.co/mbcWYNK/select-area-20201011213238.png

Cross-Site Scripting (XSS) - Security Issue

Affected software : php-mysql-admin-panel-generator

Version : N/A

Type of vulnerability : XSS (Cross-Site Scripting)

Author : s7safe

Description:
php-mysql-admin-panel-generator is susceptible to cross-site scripting attacks, allowing malicious users to inject code into web pages, and other users will be affected when viewing web pages .

PoC :
turn to http://192.168.146.130/generated/mysql2022-03-26_02-49/edit-db.php?act=%22%3E%3CScRiPt%3Ealert(%22xss%22)%3C%2FsCrIpT%3E

payload:"><ScRiPt>alert("xss")<%2FsCrIpT>

Successful

Reason:
Failure to filter or escape special characters leads to vulnerabilities

How to fix :
escape special characters or filter it .

by s7safe

Nothing works

when i click the next button nothing works......fix the issue mate

image upload

Hi,
Is there an option for uploading pictures?

Can`t work button next step

Installed thisscripts on my shared-hosting for testing and i find not worked button. I added db user or pass or host, but does not continue further

Cross-Site Scripting (XSS) - Security Issue

Affected software : php-mysql-admin-panel-generator

Version : N/A

Type of vulnerability : XSS (Cross-Site Scripting)

Author : Noth

PoC :

login the system
turn to http://127.0.0.1/php-mysql-admin-panel-generator-master/generated/noth2020-09-06_19-37/edit-users.php?act=add
Type XSS payload : <svg/onload=alert(1)>
Successful

Reason:
Failure to filter or escape special characters leads to vulnerabilities

How to fix :
escape special characters or filter it .

by Noth

Converts Database Table Names to lowercase

Upon generating the files, it converts table names to lower case, so for example a table names "Menu" is converted in the php files as "menu" and it creates errors.

Unable to upload images in Ckeditor from local computer

It should show upload option, like original ckeditor is showing , so users can upload images from local computer .

PHP 7.1 support?

When I use PHP version 7.1 and above, I don't get the table data shown in the panel, only the number of entries. Any plans for PHP 7.1 support?

Blank Login-Page

After generating the admin-pages and trying to log in with admin/admin, the login.php page stays blank and nothing happens. Tried in several browsers.
Any ideas?
Thanks
Dev

Can this work with SQLite?

header already sent issue in save.php , when deleting values

i have fixed the issue, by adding

//beginning of file
ob_start();

//end of file
ob_end_flush();

save.php issue on get vars

Adjust handler.php
from line 114:

		$save = "<?php
		include(\"includes/connect.php\");

		$"."cat = $"."_POST['cat'];
		$"."cat_get = $"."_GET['cat'];
		$"."act = $"."_POST['act'];
		$"."act_get = $"."_GET['act'];
		$"."id = $"."_POST['id'];
		$"."id_get = $"."_GET['id'];

		";

		$save = "<?php
		include(\"includes/connect.php\");

		$"."cat = \"\";
		if(isset($"."_POST['cat'])){
			$"."cat=$"."_POST['cat'];
		}		
		
		$"."cat_get = \"\";
		if(isset($"."_GET['cat'])){
			$"."cat_get=$"."_GET['cat'];
		}	

		$"."act = \"\";
		if(isset($"."_POST['act'])){
			$"."act=$"."_POST['act'];
		}	

		$"."act_get = \"\";
		if(isset($"."_GET['act'])){
			$"."act_get=$"."_GET['act'];
		}	

		$"."id = \"\";
		if(isset($"."_POST['id'])){
			$"."id=$"."_POST['id'];
		}	

		$"."id_get = \"\";
		if(isset($"."_GET['id'])){
			$"."id_get=$"."_GET['id'];
		}

		";

Generating works partially

I have managed to run it and let it create a folder with the php files after pressing on Generating Admin Panel. However, I see the files created, only the index.html in the Generated folder is blank. I also dont get the Admin Panel °Finished page. It stays on the Available Databases page, although it generates the files.

Then upon entering the address to the generated panel monually I get:

( ! ) Notice: Undefined index: auth in /home/swtchme/public_html/neairaklitsa/panel/generated/swtchme_NeaIraklitsa2019-09-18_18-28/index.php on line 3
--

I tried with PHP5 and PHP7, same result.