Jump to content
  • 0

How to secured phpadmin from injecting some program hack?


Famous

Question


  • Group:  Members
  • Topic Count:  145
  • Topics Per Day:  0.03
  • Content Count:  455
  • Reputation:   3
  • Joined:  06/19/12
  • Last Seen:  

How to secured phpadmin from injecting some program hacks?

is there any tips or guide? how to secure php admin even you have strong password..

Edited by zhen
Link to comment
Share on other sites

7 answers to this question

Recommended Posts


  • Group:  Developer
  • Topic Count:  153
  • Topics Per Day:  0.04
  • Content Count:  2285
  • Reputation:   745
  • Joined:  06/16/12
  • Last Seen:  

nothing that secure on Internet.. :v

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  145
  • Topics Per Day:  0.03
  • Content Count:  455
  • Reputation:   3
  • Joined:  06/19/12
  • Last Seen:  

Posted · Hidden by Emistry, February 23, 2013 - more like a SPAM post ?
Hidden by Emistry, February 23, 2013 - more like a SPAM post ?

/omg

Link to comment

  • Group:  Members
  • Topic Count:  17
  • Topics Per Day:  0.00
  • Content Count:  754
  • Reputation:   186
  • Joined:  05/22/12
  • Last Seen:  

You can change the default url as a first line of defense.

 

Instead of

 

 

http://yoursite.net/phpmyadmin

use

 

http://yoursite.net/phpmy4dm1n

Or something complex.

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  2
  • Topics Per Day:  0.00
  • Content Count:  14
  • Reputation:   0
  • Joined:  01/30/12
  • Last Seen:  

Use a strong password. like 10-30 Letter with numbers.

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  75
  • Topics Per Day:  0.02
  • Content Count:  2223
  • Reputation:   593
  • Joined:  10/26/11
  • Last Seen:  

When you create your MySQL users, set hostnames too so they can only connect from the host you specify. Only give each MySQL user the minimum privileges it needs.

rAthena only needs SELECT, INSERT, UPDATE, DELETE on the ragnarok database

and INSERT on the log database.

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  0
  • Topics Per Day:  0
  • Content Count:  7
  • Reputation:   0
  • Joined:  01/05/12
  • Last Seen:  

-1- create a vhost instead of standard pma symlink

-2- set strong passwords

-3- use allow,deny rules in vhost to only accept connections from maint'staff computers

Link to comment
Share on other sites


  • Group:  Developer
  • Topic Count:  153
  • Topics Per Day:  0.04
  • Content Count:  2285
  • Reputation:   745
  • Joined:  06/16/12
  • Last Seen:  

also, make your own encryption algorithm for `user_pass` on `login` table. MD5 is very famous, many people able to dencrypt it. :D

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...