Secure PHPMyAdmin

Good morning.

Just a quick not on how to secure your servers, if you use phpmyadmin.

We tend to block root access through ssh, but we don't do the same in phpmyadmin, allowing mysql root access here.

To prevent this, add the following lines of code in /etc/phpmyadmin/config.inc.php.
If you use Debian/Ubuntu.

Code:

/* Authentication type */
$cfg['Servers'][$i]['auth_type'] = 'cookie';
$cfg['Servers'][$i]['AllowRoot'] = false;

Other:

Code:

/* Authentication type */
$cfg['Servers'][$i]['AllowRoot'] = false;