Web Hosting Talk







View Full Version : How to configure PHPMyAdmin for multiple domains SECURELY


DeWebDude
06-26-2003, 03:14 AM
Does anyone have a good reference with step by step instructions ( url/pdf etc) on how to configure phpmyadmin so that any of the hosting clients we have could use the application, but that they only see and have the ability to change things for their database, and nobody elses?

Additionally is there a way to run 1 copy of phpmyadmin and not have to load it for each domain url ?

Thanks

DanielJarrett
06-26-2003, 04:18 AM
Why not just install one copy of it somewhere and have users enter their database's username & password? Then you're sure they can't access someone else's database (there is an option in phpMyAdmin to have the user enter the username/password themselves instead of being logged in automatically).

3spades
06-26-2003, 02:18 PM
DanielJarrett is correct on this, install a copy somewhere on the server and in the config file look $cfg['Servers'][$i]['auth_type'] = 'root'; under * Server(s) configuration and set the value to
$cfg['Servers'][$i]['auth_type'] = 'http'; This will prompt for a username and password when phpmyadmin is called.

DeWebDude
06-26-2003, 05:14 PM
I tried what you said and it's doing something, but not working.
Is there some step by step you guys have seen to maybe help me trought it?

Thanks

heyzuess
06-26-2003, 05:57 PM
Try here?:

http://www.phpmyadmin.net/documentation/

kimrari
06-27-2003, 11:00 AM
it really is that simple. change the config file to http auth and wiola, they have to enter the user name and password.

if u ask me, the easiest way is cpanel, each account gets access to phomyadmin with only their databases

DeWebDude
06-27-2003, 12:55 PM
Well if I change that I can't authenticate when I try to use it, and I have used both unix & MySQL passwords & user id's with no luck.

The docs really just tell me what each feature does, but I was hoping for a kind of step by step doc that would tell me what to do and why so that I would learn it, but also not leave any openings because I missed something.

Details: I have a user called bob, and lets say his password is red, he can via OBDC connect to the MySQL db and change or do whatever he likes to his db, but when I use that same bob user id and password, it doesn't let me authenticate through phpmyadmin.

Thanks for keeping the thread going until I get this thing working!

ijg0
06-27-2003, 03:03 PM
With phpmyadmin you can give users access to create their own databases. There is no option to limit the number they can create though (as far as I know).

As to one place with one copy you can install one copy on each server. For shared accounts just point the users to www.myhostingcompanydomain.com/phpmyadmin.

You are best setting up this using ssl (i.e. running this on port 443 https://www.myhostingcompanydomain.com/phpmyadmin). This will then encrypt the passwords and usernames being sent on login as well as any database information.

Cpanel just gives the user access to create their own databases (upto a admin set limit) with a link to phpmyadmin. This is overkill for this task considering the costs involved.