Modify the authentification method of PhpMyAdmin of http towards cookie to keep the interface of identification of ISPConfig and the webmail. For do that, just change http to cookie and generate a $cfg_blowfish_secret variable at install (if possible)
But does it make sense? The usernames an passwords of the ispconfig users are others that the mysql users. How to control which ispconfig user accesses which db?
I speak about the posting of the form of identification and not about the use of the cookie ISPConfig to connect in phpMyADMIN My english is not very good. If you don't understand, i'll try to explain better
I've modify phpMyAdmin for this. The package is here : phpMyAdmin-2.7.0-rc1.pkg Installation : 1) Delete the old PHPMyAdmin package on the shell: rm -rf /home/admispconfig/ispconfig/web/phpmyadmin rm -rf /home/admispconfig/ispconfig/web/tools/tools/phpmyadmin 2) Install the new package with the update manager in the controlpanel. Example : https://web1.tribal-dolphin.net:81/phpmyadmin/
Nice I will try that! Uhm, I was wondering, were is the phpmyadmin database stored in? what files? Thanks... I'l let you know how your mod works in my server. Many thanks for this.
Do yyou mean the MySQL databases? That depends on your MySQL installation, but on most distributions it's /var/lib/mysql.
Hi Tribal-Dolphin. Do I understand correctly - that this modification will prevent ISP users from seeing any databases other than ones they have created themselves?
ISP users will always only see the databases that they created themselves with or without tribal dolphins modification. Tribal-dolphin modified the login method of phpmyadmin. If you prefer http authentication, let it like it is. If you prefer cookie based authentication you can try the modifications Tribal-Dolphin posted.
I'm using the original package I downloaded from the ISPConfig website. Everytime I try to access it with an ISPConfig user I created I get a login error. I can however get to phpmyadmin as root. Any ideas why is this happening?
I guess you used the wrong username. It must be something like web1_u1, for example (that's the user for the database web1_db1). web23_db5 would have the username web23_u5. You can find this on the "Options" tab of the web site in question.
