Index: [Article Count Order] [Thread]

Date:  Mon, 29 Jun 2009 11:08:56 -0700
From:  "Ken Marcus - Precision Web Hosting, Inc." <kenmarcus (at mark) precisionweb.net>
Subject:  [coba-e:15749] Re: Restrict phpmyadmin to local machines only
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <4A205A463E88434C902F1B2007F5FE17@OfficeKen>
References:  <4A48FFE9.5070306 (at mark) nickcr.co.uk>
X-Mail-Count: 15749


----- Original Message ----- 
From: "Linux-Gnome" <linux-gnome (at mark) nickcr.co.uk>
To: <coba-e (at mark) bluequartz.org>
Sent: Monday, June 29, 2009 10:54 AM
Subject: [coba-e:15747] Restrict phpmyadmin to local machines only


> My server has recently been getting a number of hits of people trying to 
> hack into phpmyadmin (version v2.7.0-pl1) and as I do not require any 
> external access to it I wanted to restrict access to all machines except 
> those on my local network, after a bit of searching I added the 
> following to "/home/phpmyadmin/config.inc.php"
> 
> /**
> * block root from logging in except from the private networks
> */
> $cfg['Servers'][$i]['AllowDeny']['order'] = 'deny,allow';
> $cfg['Servers'][$i]['AllowDeny']['rules'] = array(
> 'deny from all',
> 'allow from localhost',
> 'allow from 192.168.0.0/23',
> );
> 
> 
> Unfortunately this did not work (down to my novice knowledge) so I am 
> after some assistance and guidance on how I should proceed.
> 
> As an aside, how do I restart phpmyadmin without bouncing the box ?
> 
> regards
> 
>   Gnome


One other option would be to change the alias from 
/phpmyadmin/
to something like
/phpmyadmin2288/



----
Ken Marcus
Ecommerce Web Hosting by
Precision Web Hosting, Inc.
http://www.precisionweb.net