Protect your phpmyadmin?

[Morgoth]

Hello.
Does anyone know of any good methods to hide and protect your phpmyadmin?

The only method I can think of is changing the name of the folder the application is in, and remove my username and password from the config file when I am not using the program.

Does anyone have have better ideas?

[Spookster]

implement login access to it via htaccess.

[Morgoth]

I don't know how to get htaccess to work.

Got any tutorials?

Do I need some sort of program to help run this, I am hosting all this myself.

[Spookster]

http://www.javascriptkit.com/howto/htaccess3.shtml

[Morgoth]

I don't think I am doing it right.

I need a different tutorial to read at the same time.

[oracleguy]

It has been a while since I've setup phpMyAdmin but isn't there like a HTTP authentication option? That brings up a box to enter a username and password and it runs it against the users in mysql?

You can also run your phpMyAdmin through SSL too, to further protect it.

[CrAzYCoDeR969]

$cfg['Servers'][$i]['auth_type'] = 'http';
$cfg['Servers'][$i]['user'] = 'root';
$cfg['Servers'][$i]['password'] = 'YOURPASS';

edit those 3 variables in config.inc.php in phpmyadmin main directory to those values and replace root and YOURPASS with the MySQL username/pass u want to log in under.

[Morgoth]

When the box appears, what do I type for the domain?

[ConfusedOfLife]

Isn't it better that we just delete phpMyAdmin when we don't need it? I mean installing it isn't that hard specially if you have a control panel for your host. So, we can use it while creating our program, and then we delete it totally! Isn't it the safest way?!

[Morgoth]

Originally posted by ConfusedOfLife
Isn't it better that we just delete phpMyAdmin when we don't need it? I mean installing it isn't that hard specially if you have a control panel for your host. So, we can use it while creating our program, and then we delete it totally! Isn't it the safest way?!

Why not try to stay on topic? That might be easier too.

The problem I have is that I want to keep this application on here, and instead of just removing the password from the config file all the time after usage*, I would prefer just to find a method where only I can access the application and no one else can. This http method will work perfectly, all I need to know is what my domain is, I have tried many things such as my IP or localhost and it doesn't seem to work.

*I am still using this application for writing my old databases to MySQL databases, and I would like not have to to go even father then just removing my password from the config file after I use it.

[raf]

Wow. Kinda strong. Remember that everyone here just tries to help.

Anyway, i never installed it, but here
http://www.phpmyadmin.net/documentation/
you find all you need on config settings. If you run a search for 'domain' on that page, you'll find it under
$cfg['Servers'][$i]['AllowDeny']['rules']
so i'd assume you need to enter it here. You can also specify an IP.

But like i said, never installed it myself. I suppose you can't (or don't want) to use MySQL-front for it ?

[Morgoth]

Originally posted by raf
But like i said, never installed it myself. I suppose you can't (or don't want) to use MySQL-front for it ?

I am using both. I don't like to create tables and fields in MySQL-Front, this little application is alot better at it ;)
MySQL-Front is great for displaying, or deleting or check on records and such, this application just falls below that.

[Morgoth]

Well,
[4.4] phpMyAdmin always gives "Access denied" when using HTTP authentication.
helped me, but I am still lost on what I type into the domain field... :(

[oracleguy]

And why can't you use .htaccess?

Wouldn't that solve the problem if your having trouble getting the http authentication to work in phpMyAdmin?

Or are you hosting using it on IIS?

[Morgoth]

Originally posted by oracleguy
Or are you hosting using it on IIS?

Still on IIS.