Forbidden to acces to this page! REP++

[Zonet]

Hello, i was looking in some servers, and i found out that they was using a script like http://ip.com/phpmyadmin
When i accessed to the page, it said forbidden or something,

It is a script, can anyone post it here?

I can allow which ip can access and the rest deny.

Using windows!


Thank you REP++ ofc.

 

[Bintzer]

Well if your using phpmyadmin on linux, just change the phpmyadmin dir to whatever you want. Something that nobody will guess.

So if you named the directory to Zonet you would access it by http://yourip/zonet

And for xampp on windows you change change that in http://localhost/security to make it so only localhost can access..

 

[Zonet]

Thank you Bintzer, it worked.

But i think they will figure out, so i'll keep this thread open if someone posts the script.

 

[Migxxx]

Thank you Bintzer, it worked.

But i think they will figure out, so i'll keep this thread open if someone posts the script.

add a .htaccess inside the phpmyadmin folder,
here a example to restrict it by ips

<Limit GET POST>
order deny,allow
deny from all
allow from 127.0.0.1
</Limit>

add as many ips u want....

 

[Zonet]

I tried, added it at the bottom of the file .htaccess

But didn't work.

 

[Migxxx]

I tried, added it at the bottom of the file .htaccess

But didn't work.

error? in wich folder u added it? wich file? more info please because it works for me under debian lenny

 

[Zonet]

i added it on cd /var/www/phpmyadmin/.htaccess

The bottom of the .htaccess file.

My new error,

When creating character

Fatal error: Uncaught exception 'PDOException' with message 'SQLSTATE[HY000]: General error: 2014 Cannot execute queries while 
other unbuffered queries are active. Consider using PDOStatement::fetchAll(). Alternatively, if your code is only ever going to run against mysql, you may enable
 query buffering by setting the PDO::MYSQL_ATTR_USE_BUFFERED_QUERY attribute.' in /var/www/accountmanagement.php:713 Stack trace: #0 /var/www
/accountmanagement.php(713): PDO->query('INSERT INTO `pl...') #1 /var/www/index.php(130): include('/var/www/accoun...') #2 {main} thrown in /var/www
/accountmanagement.php on line 713

Also the character creats but i'm gettin this.

 

[Migxxx]

i added it on cd /var/www/phpmyadmin/.htaccess

The bottom of the .htaccess file.

u added it via command line? if yes then u can't add it by just typing the path /var/www etc bekaus it is just a shortcut to the real folder...

the real path to phpmyadmin is
/usr/share/phpmyadmin
if you installed it via aptitude

 

[Zonet]

Yeah, i installed the phpmyadmin on (apt-get install phpmyadmin, and i got it on /var/www/

I just saw that i had a phpmyadin on my usr/share too.

 

[Zonet]

bump

Everything fixed, just need help with that forbidden.

 

[Don Daniello]

You wanna block access to phpmyadmin yeah ?

 

[Zonet]

Yes, for windows now. Only localhost from own computer can acess, otherwie for others, it dont allow them.

bump