RE: [cobalt-security] phpmyadmin protected by >htaccess

["Florian Bruckner" <h9651030@xxxxxxxxxxxxxxxxxxxxxxx>]

If you set phpMyAdmin to its enhanced security mode your users identify
against their mysql accounts. In this mode you do not need any .htaccess
file because phpMyAdmin does the password handling itself. The docs explain
how to enable this mode and what it requires.

regards,
Florian

-----Original Message-----
From: cobalt-security-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of Robbert
Hamburg
Sent: Tuesday, March 06, 2001 10:56 PM
To: cobalt-security@xxxxxxxxxxxxxxx
Subject: [cobalt-security] phpmyadmin protected by >htaccess
Importance: High


Hello,

Perhaps a little of topic but everywere else I ask people don't answer
serious to a problem which can become a great problem...

I have a question which I think can be a potential security risk for my
server. Let me explain.
I want to install phpmyadmin and want to protect it with a htaccess file.
For normal users it should be enough however I think that it isn;t enough
for more advanced users.
Can you please tell me what risk I run on my server doing it the way
discribed above for using phpmyadmin, run under a subdomain.
Perhaps you have some thoughts about setting it up better protected.

Hope to get some good information from you !!

Thanks in advance,

Robbert Hamburg
rhamburg@xxxxxx


_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security