From 3494cd765f5f035d104b8c980bdf42cfb1c09223 Mon Sep 17 00:00:00 2001
From: jvoisin
Date: Fri, 10 Jul 2015 14:40:16 +0200
Subject: Add Phpmyadmin in whitelis

---
 whitelist.yara | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/whitelist.yara b/whitelist.yara
index 0142a53..6d5fdb8 100644
--- a/whitelist.yara
+++ b/whitelist.yara
@@ -85,7 +85,6 @@ private rule Dotclear : Blog
         hash.sha1(0, filesize) == "51e6810ccd3773e2bd453e97ccf16059551bae08" or // inc/libs/clearbricks/common/lib.date.php
         hash.sha1(0, filesize) == "4172e35e7c9ce35de9f56fb8dfebe8d453f0dee4" or // inc/libs/clearbricks/template/class.template.php
         hash.sha1(0, filesize) == "cf65db6ae55486f51370f87c4653aaed56903ccc" // inc/core/class.dc.modules.php
-
 }
 
 private rule Owncloud
@@ -97,7 +96,14 @@ private rule Owncloud
         hash.sha1(0, filesize) == "5346cb6817a75c26a6aad86e0b4ffb1d5145caa5" or // 3rdparty/symfony/process/Symfony/Component/Process/Process.php
         hash.sha1(0, filesize) == "c8a6d4292448c7996e0092e6bfd38f90c34df090" or // core/doc/admin/_images/oc_admin_app_page.png
         hash.sha1(0, filesize) == "acc7af31d4067c336937719b9a9ad7ac8497561e" // core/doc/admin/_sources/configuration_server/performance_tuning.txt
+}
 
+private rule Phpmyadmin
+{
+    condition:
+        /* phpmyadmin 4.4.11 */
+        hash.sha1(0, filesize) == "52afd26f6d38e76d7d92b96809f98e526e45c021" or // libraries/DatabaseInterface.class.php
+        hash.sha1(0, filesize) == "398507962b9dd89b0352f2ea9c648152fe932475" // libraries/DBQbe.class.php
 }
 
 private rule IsWhitelisted
@@ -110,5 +116,6 @@ private rule IsWhitelisted
         Roundcube or
         Concrete5 or
         Dotclear or
-        Owncloud
+        Owncloud or
+        Phpmyadmin
 }
-- 
cgit v1.3