Securing the phpmyadmin section of a website

Studebaker

I am building a website that has information that I wish not to be accessible to the public but I noticed that the phpmyadmin page is easily accesible via the url of my page. Is there a way I can fix this problem? I am not the administrator of the database, and I cannot seem to contact him at the moment. Is this a problem that he could fix?

lucasrd

PHPmyadmin is usually installed in it's own directory...you should put an .htaccess file in that directory to password protect it.

Studebaker

Ok I'll try that, thanks!

justsomeone

Be aware that .htaccess protection is very insecure. The username and password and transmitted in plaintext. It's more secure to create a different subdomain just for admin stuff, and secure access to that through firewall rules if possible.

Studebaker

Firewall rules? Is this something that I would need to talk to the server administrator about?

Studebaker

I tried the .htaccess file, but I do not have the appropriate access priviledges to modify the /phpmyadmin directory. I also tried uploading another .htaccess file to the /phpmyadmin directory on my local computer, but I received the same message.

Firewall rules? Is this something that I would need to talk to the server administrator about?

justsomeone

Studebaker wrote:
Firewall rules? Is this something that I would need to talk to the server administrator about?

Yes. And if you are on a shared host, you may not get anywhere with your request,