Why am I not authorised?

[gajinoz]

In the AdminCP there is an item under Maintenance to execute an SQL query. However, if I try to do that I'm told I'm not authorised.

Why is this?

[kh99]

In your config.php file, there's a $config['SpecialUsers']['canrunqueries'] setting. You have to add your userid to that to be able to run queries.

[ozzy47]

You need to set your userid in the includes/config.php file.

    //    ****** USERS WITH QUERY RUNNING PERMISSIONS ******
    //    The users specified here will be allowed to run queries from the control panel.
    //    See the above entries for more information on the format.
    //    Please note that the ability to run queries is quite powerful. You may wish
    //    to remove all user IDs from this list for security reasons.
$config['SpecialUsers']['canrunqueries'] = '1';

Change 1 to your userid

[gajinoz]

Ahh.. now I understand, thank you.

[ozzy47]

Not a problem.

[Max Taxable]

When you're done with your query, de-permission yourself from making queries. I suggest that because it is a security feature - if some cracker gets in your account you don't want him/her having query powers.

[tbworld]

Originally Posted by Max Taxable

When you're done with your query, de-permission yourself from making queries. I suggest that because it is a security feature - if some cracker gets in your account you don't want him/her having query powers.

@Max Taxable, I could not like your post, so I am doing that now.

It isn't difficult to get around, but it will keep the kiddies at bay. As an option, if you are on a fixed IP then you can use a PHP conditional/construct in the config.php file to check for your IP.

[Max Taxable]

Originally Posted by tbworld

@Max Taxable, I could not like your post, so I am doing that now.

It isn't difficult to get around, but it will keep the kiddies at bay. As an option, if you are on a fixed IP then you can use a PHP conditional/construct in the config.php file to check for your IP.

Yeah I mean, yes it might be a pain in the butt to change it every time. But it is there to inhibit the little cracker or script kiddie who might get into your admin account.

If it's a more skilled attacker, he doesn't need to crack passwords and your config settings won't matter a whole heckuva lot.