views:

80

answers:

3

I use phpmyadmin, and when entering this adress:

 www.mydomain.com/phpmyadmin

a login page appears.

Is there any way of disabling it, so it doesn't appear/exist?

Thanks

A: 

If you disable it then anyone trying that URL will have immediate access to you mysql database and could do anything, including deleting them. The password is here for a reason !

But, there might be a valid reason to do that, maybe you are protecting the directory with an other security ?

Loïc Février
Actually no I don't have any other security... Offcourse I need to be safe, and if removing it will harm me then I wont do it. What about ToonMariner:s answer?
Camran
Then don't install it in a public directory. Local machine is a good idea. A client is also a good one. Phpmyadmin is a good tool if you need access from everywhere, even computers where you can't install anyhing / use your own USB key but that's in practice pretty rare.
Loïc Février
+1  A: 

yep - you can set your pasword in the config file - BUT if you are using this on your domain then I'd STRONGLY recommend you take it off your site altogether!!!!

Use a cleint to access your database - like mysql workbench or mysql yog or any of the numerous ones out there...

if you MUST use phpmyadmin then why not install it on your local machine and add the details to the config there - MUCH safer

ToonMariner
How do I do the later one. Install it on my local computer and configure it there? How do you mean, what is this method called? Links please...
Camran
You can use XAMPP : http://sourceforge.net/projects/xampp/Then edit the config file and configure host/login/database... be aware that some databases can't be access from an other domain (ie, a database at mydomain.com can only be access from a script in the same domain). Often true for free "host", false if you are paying.
Loïc Février
@Camran: You will need to set up a local server with phpMyAdmin on it. Just search for WAMP / LAMP on Google, there are tons of free servers that come pre-installed with phpMyAdmin.
casablanca
A: 

One thing you may want to do is just use a .htaccess file to redirect that URL somewhere to basically restrict the ability to get to that URL.

To do this, just create a .htaccess file at the root directory of your domain and put this in it:

Redirect 301 /phpmyadmin http://www.mydomain.com/

Then whenever you need to access phpmyadmin, you would just have to comment out that line temporarily while you do your work.

Jared