Solved phpmyadmin access

[mpa]

How do you change so only 127.0.0.1 can connect to PhpMyAdmin.

 

[JayBeee]

http://localhost/security

 

[mpa]

And where do i change so no other ip adresses can connect to phpmyadmin? So they can't even enter user and pass?

 

[JayBeee]

I can't check right now, since I'm on Linux and don't have phpmyadmin installed. But look around in there, I know it's there somewhere. IP filter or something like that.

 

[Dark Warrior]

Im not sure if it will work on the current phpmyadmin path since when i tested that dosent work for me and i had to move phpmyadmin into my httdocs folder to make it work and it's better because you can change de rout like http://localhost/SecretPhpMyAdmin or something anyway just move it and make an .htaccess

<Limit GET POST>

     order deny,allow

     deny from all

     allow from 127.0.0.1

</Limit>

Probb there is other ways and more easy but that the one i used..

EDIT: You have to log with localhost or 127.0.0.1 < Are the same but i was talking about urls XD

 

[mpa]

Im not sure if it will work on the current phpmyadmin path since when i tested that dosent work for me and i had to move phpmyadmin into my httdocs folder to make it work and it's better because you can change de rout like http://localhost/SecretPhpMyAdmin or something anyway just move it and make an .htaccess

<Limit GET POST>

     order deny,allow

     deny from all

     allow from 127.0.0.1

</Limit>

Probb there is other ways and more easy but that the one i used..

EDIT: You have to log with localhost or 127.0.0.1

Where should i write that text in the code box?
Please explain better i don't understand what you're saying... "just move it and make an .htaccess" <-- wtf??

 

[Don Daniello]

Create '.htaccess' file in the main directory of phpmyadmin and put it into

 

[Tufte]

Use this guide to restrict anyone but you to enter PhPmyadmin.

For example:

$cfg['Servers'][$i]['AllowDeny']['order']  = 'deny,allow';
$cfg['Servers'][$i]['AllowDeny']['rules'][] = 'allow % from 127.0.0.1';
$cfg['Servers'][$i]['AllowDeny']['rules'][] = 'allow % from 123.456.7.890';
$cfg['Servers'][$i]['AllowDeny']['rules'][] = 'allow % from 11.22.33.44';
$cfg['Servers'][$i]['AllowDeny']['rules'][] = 'deny % from all';

This allows only those with the IP 123.456.7.890 and 11.22.33.44 to enter PhPmyadmin, aswell as your local computer (127.0.0.1). Ofcourse, you can take away one if you only want yourself to enter Phpmyadmin.

This is in the config.ini file.

 

[mpa]

Thanks for the help.

 

[Tufte]

bump! I used alot of time finding back this post since i re-installe my xampp. I've tried alot of stuff, htacces and crap, but the only thing that works, is the code in my post above. Place it in the config.inc.php file and your safe.

This post should be sticky, since it would prevent ALOT of phpmyadmin hacks.