By tonylam69
code:
phpMyAdmin - Web based MySQL browser written in php
Allows only localhost by default
But allowing phpMyAdmin to anyone other than localhost should be considered
dangerous unless properly secured by SSL
Alias /phpMyAdmin /usr/share/phpMyAdmin Alias /phpmyadmin /usr/share/phpMyAdmin
<Directory /usr/share/phpMyAdmin/> AddDefaultCharset UTF-8
<IfModule mod_authz_core.c> # Apache 2.4 <RequireAny> Require ip 127.0.0.1 Require ip ::1 </RequireAny> </IfModule> <IfModule !mod_authz_core.c> # Apache 2.2 Order Deny,Allow Deny from All Allow from 127.0.0.1 Allow from ::1 </IfModule> </Directory>
<Directory /usr/share/phpMyAdmin/setup/> <IfModule mod_authz_core.c> # Apache 2.4 <RequireAny> Require ip 127.0.0.1 Require ip ::1 </RequireAny> </IfModule> <IfModule !mod_authz_core.c> # Apache 2.2 Order Deny,Allow Deny from All Allow from 127.0.0.1 Allow from ::1 </IfModule> </Directory>
These directories do not require access over HTTP - taken from the original
phpMyAdmin upstream tarball
<Directory /usr/share/phpMyAdmin/libraries/> Order Deny,Allow Deny from All Allow from None </Directory>
<Directory /usr/share/phpMyAdmin/setup/lib/> Order Deny,Allow Deny from All Allow from None </Directory>
<Directory /usr/share/phpMyAdmin/setup/frames/> Order Deny,Allow Deny from All Allow from None </Directory>
This configuration prevents mod_security at phpMyAdmin directories from
filtering SQL etc. This may break your mod_security implementation.
#<IfModule mod_security.c>
<Directory /usr/share/phpMyAdmin/>
SecRuleInheritance Off
</Directory>
#</IfModule>
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
In my phpMyAdmin.conf file I replaced 127.0.0.1 (aka local host) to my current IP address. I use IP Location to find my IP address.
It is possible to use 127.0.0.1 while using a secure SSH tunnel using the Windows PuTTY application. I found this article that explains how to more securely access your phpMyAdmin installation then just hard coding an IP address in the phpMyAdmin.conf file. I would think this method would actually be preferred as everything isn’t sent as plain text.
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and AI-native businesses
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Start building today
From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.
