2016-12-02 19:19:11 +00:00
|
|
|
<?php
|
|
|
|
|
|
|
|
|
|
# If you are having problems connecting to the MySQL database and all of the variables below are correct
|
|
|
|
|
# try changing the 'db_server' variable from localhost to 127.0.0.1. Fixes a problem due to sockets.
|
|
|
|
|
# Thanks to @digininja for the fix.
|
|
|
|
|
|
|
|
|
|
# Database management system to use
|
|
|
|
|
$DBMS = 'MySQL';
|
|
|
|
|
#$DBMS = 'PGSQL'; // Currently disabled
|
|
|
|
|
|
|
|
|
|
# Database variables
|
|
|
|
|
# WARNING: The database specified under db_database WILL BE ENTIRELY DELETED during setup.
|
|
|
|
|
# Please use a database dedicated to DVWA.
|
|
|
|
|
$_DVWA = array();
|
|
|
|
|
$_DVWA[ 'db_server' ] = '127.0.0.1';
|
|
|
|
|
$_DVWA[ 'db_database' ] = 'dvwa';
|
|
|
|
|
$_DVWA[ 'db_user' ] = 'root';
|
2017-01-02 21:03:54 +00:00
|
|
|
$_DVWA[ 'db_password' ] = 'vulnerables';
|
2016-12-02 19:19:11 +00:00
|
|
|
|
|
|
|
|
# Only used with PostgreSQL/PGSQL database selection.
|
|
|
|
|
$_DVWA[ 'db_port '] = '5432';
|
|
|
|
|
|
|
|
|
|
# ReCAPTCHA settings
|
|
|
|
|
# Used for the 'Insecure CAPTCHA' module
|
|
|
|
|
# You'll need to generate your own keys at: https://www.google.com/recaptcha/admin/create
|
2017-01-02 21:03:54 +00:00
|
|
|
# Thanks to http://stackoverflow.com/questions/34274492/dvwa-setup-php-function-allow-url-include-disabled
|
|
|
|
|
$_DVWA[ 'recaptcha_public_key' ] = '6LdK7xITAAzzAAJQTfL7fu6I-0aPl8KHHieAT_yJg';
|
|
|
|
|
$_DVWA[ 'recaptcha_private_key' ] = '6LdK7xITAzzAAL_uw9YXVUOPoIHPZLfw2K1n5NVQ';
|
2016-12-02 19:19:11 +00:00
|
|
|
|
|
|
|
|
# Default security level
|
|
|
|
|
# Default value for the secuirty level with each session.
|
|
|
|
|
# The default is 'impossible'. You may wish to set this to either 'low', 'medium', 'high' or impossible'.
|
|
|
|
|
$_DVWA[ 'default_security_level' ] = 'impossible';
|
|
|
|
|
|
|
|
|
|
# Default PHPIDS status
|
|
|
|
|
# PHPIDS status with each session.
|
|
|
|
|
# The default is 'disabled'. You can set this to be either 'enabled' or 'disabled'.
|
|
|
|
|
$_DVWA[ 'default_phpids_level' ] = 'disabled';
|
|
|
|
|
|
|
|
|
|
# Verbose PHPIDS messages
|
|
|
|
|
# Enabling this will show why the WAF blocked the request on the blocked request.
|
|
|
|
|
# The default is 'disabled'. You can set this to be either 'true' or 'false'.
|
|
|
|
|
$_DVWA[ 'default_phpids_verbose' ] = 'false';
|
|
|
|
|
|
|
|
|
|
?>
|
