MySQL Curses interface

[John G. Heim]

Yeah, you probably don't want your phpMyAdmin installation accessible from 
just anywhere. Making it accessible only from localhost was just an idea I 
had predicated on the assumption that you weren't already running a web 
server.

Volumes can and have been written on securing apache. I haven't putzed with 
phpMyAdmin for a while and I don't recall what security features it offers. 
But some of the things you could do via apache are:

1. Make the phpMyAdmin site accessible only to certain IP addresses
2. Require a user ID and password to connect

Point #1 above would include making it accessible only from the localhost. 
Or you could tell apache to allow access only from the localhost and some 
static IP address like that of your workstation.  Here is how I restrict 
access to server status reports on an apache server to computers at the 
University of Wisconsin Math Department and to my machine at home:


<Location /server-status>
    Order deny,allow
    Deny from all
    Allow from .math.wisc.edu lambeau.johnheim.com
</Location>#

----- Original Message ----- 
From: "Tony Baechler" <tony at baechler.net>
To: "Linux for blind general discussion" <blinux-list at redhat.com>
Sent: Tuesday, April 08, 2008 11:46 AM
Subject: Re: MySQL Curses interface


> Actually, that wouldn't work unless I install another copy of Apache. 
> It's a business server with active sites.  If Apache only listens on 
> localhost, those sites go down.  If I can set phpmyadmin to only respond 
> to connections from localhost, that would help.  I definitely don't want 
> it available to the outside world because I've seen too many security 
> advisories for both MySQL and phpmyadmin to take a chance.
>
> John G. Heim wrote:
>> You could get around the security problem by configuring the web server 
>> to listen only on the localhost address, 127.0.0.1. Then ssh to the 
>> server and run lynx connecting to the localhost.
>
> _______________________________________________
> Blinux-list mailing list
> Blinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/blinux-list
>
>