how to lockdown phpMyAdmin

[akmayuga]

Hi guys,

may i know how and where to lockdown "192.168.1.1/phpMyAdmin"??

thank you

[akmayuga]

i tried this http://www.linuxbrigade.com/lock-down-your-phpmyadmin-access/ but i cant find the path

[DomeDan]

tested on vicibox 4.0.2, stuff might differ with 5.0.X

phpmyadmin is already in the www root so no alias is needed.

create the file /etc/apache2/conf.d/phpmyadmin.conf (it can be named anything .conf)
and put something like this in it:

Code: Select all

<Directory "/srv/www/htdocs/phpMyAdmin/">
    Order Deny,Allow
    Deny from all
    Allow from 192.168.0.2
</Directory>


verify that /srv/www/htdocs/phpMyAdmin/ is the path to the phpmyadmin directory
replace 192.168.0.2 with any ip you want,
if you want to allow a whole subnet you can type something like this: 192.168.0.1/32 (its 192.168.0.1 to 192.168.0.254)
and you can specify multiple ip addresses by writing more "Allow from" rows like in the guide you linked to

[akmayuga]

HI DomeDan,

thank you so much!!!

[williamconley]

this can help as well if you want to stop people from looking for "other holes":

http://www.viciwiki.com/index.php/DGG#L ... or_Install