Back to Home
thorsten icon

phpMyFAQ

by thorsten

Overview

phpMyFAQ is a multilingual, database-driven FAQ system, and its experimental MCP server allows Large Language Models (LLMs) to query the FAQ knowledge base for contextually relevant answers.

Installation

Run Command
php bin/console phpmyfaq:mcp:server

Environment Variables

  • PMF_DB_HOST
  • PMF_DB_NAME
  • PMF_DB_USER
  • PMF_DB_PASS
  • OPENSEARCH_BASE_URI
  • ELASTICSEARCH_BASE_URI
  • DEBUG
  • DEBUG_LEVEL
  • APP_ENV
  • AAD_OAUTH_TENANTID
  • AAD_OAUTH_CLIENTID
  • AAD_OAUTH_SECRET
  • PMF_VERSION

Security Notes

Critical Remote Code Execution (RCE) vulnerability identified in `scripts/langEditor.php` due to direct `eval()` on unsanitized user-supplied input (`$_POST['output']`). Hardcoded development database credentials in `docker-compose.yml` (e.g., `MYSQL_ROOT_PASSWORD=iop`, `POSTGRES_PASSWORD=phpmyfaq`) are a significant risk if used in production. The system exposes REST APIs, some public, which require robust authentication and authorization checks (though the code indicates some checks are in place).

Similar Servers

Stats

Interest Score50
Security Score3
Cost ClassMedium
Avg Tokens500
Stars606
Forks262
Last Update2025-12-06

Tags

FAQ SystemKnowledge BaseLLM IntegrationContent ManagementPHP