phpMyAdmin is a popular software and as such is a target for various scripted attacks. If you run phpMyAdmin installation somewhere you should really make sure it is secured.
There are some things you can do to keep you safer:
1. Remove setup directory from phpMyAdmin. You will not use it after initial setup:
rm -rf /usr/share/phpmyadmin/setup/
2. Prevent access to libraries directory from browser. You can use a .htaccess file for this.
3. In case you don’t want all users to access phpMyAdmin you can use AllowDeny rules to limit them:
Use the following in the file config,inc.php of phpMyAdmin to restrict access to from remote machines.
vim /usr/share/phpmyadmin/config.inc.php

Recent Comments