Coral: general access phpmyadmin

Coral :  General | Change Ports | Clear Logs | Root folder www - Access | Root folder ssl - Access | Root phpMyAdmin - Access

General - phpMyAdmin Access phpMyAdmin is integrated into The Uniform Server's structure. It is used to administer the MySQL server locally using a browser, or (optionally) over the Internet. It performs various tasks such as creating, modifying or deleting databases, tables, fields or rows; executing SQL statements; or managing database users and permissions. To run phpMyAdmin, simply click the phpMyAdmin button. Because of the powerful capabilities, phpMyAdmin must be properly secured before allowing external access. The Uniform Server attempts to do this as transparently as possible. By default, access is restricted to localhost only, while Intranet and Internet access is provided by menu options explained below.

UniServer 8-Coral   Home   Quick Start » General   Apache   MySQL   PHP   MSMTP   CRON   DtDNS   Db Backup   Perl   Main Index

Features

• Local access - Requires no name/password. These are provided transparently (as user root)
• Intranet + password - Requires name and password as defined for restricted MySQL user (all users)
• Internet + password + ssl - Requires name and password as defined for restricted MySQL user (all users). All transactions performed over a secure encrypted connection
• Disable Internet selection if server certificate is not generated.
• Automatically tracks SSL port used. User may change main server configuration.
• Automatically tracks server name. User may change main server configuration.

Top

Root phpMyAdmin - Change access type

UniController: Server Configuration > General > Root phpMyAdmin - Change access type

A) Local access is the default and prevents both Intranet and Internet users access to phpMyAdmin. Only localhost may connect. It allows the root MySQL administrator direct access without the need to enter a name or password. For security reasons you must change the default MySQL password. This prevents accidental cross-site scripting. B) Intranet + passwords. Anyone on your Intranet is allowed access to phpMyAdmin, however to gain access to the MySQL server requires a name and password. A user name and password are stored on the MySQL server for each restricted user created. A restricted user is one that is assigned access only to specific databases, and also has limited privileges for them. C) Internet + passwords +ssl This is similar to Intranet, except that all transactions are performed over a secure encrypted connection using ssl. If you have not installed or created a server certificate, clicking this radio button will produce a warning and the access selection will not change. This security feature forces you to use ssl and prevents sending names and passwords over the Internet in plain text. D) phpMyAdmin root folder is protected by an .htaccess file. This menu button opens this file in the default text editor allowing you to view or edit the file. E) phpMyAdmin is configured using the user configuration file config.inc.php. This menu button opens this file in the default text editor allowing you to view or edit the file. F) This menu button opens phpMyAdmin in the default browser. A greyed out button indicates that Apache is not running and its function are unavailable.

Top

Background information

Two files govern phpMyAdmin access and ultimately MySQL server access:
UniServer\home\phpMyAdmin\.htaccess - Apache configuration
UniServer\home\phpMyAdmin\config.inc.php - phpMyAdmin user configuration

You can modify the above files to suite your own requirements, but be sure you read the following:

File .htaccess

When selecting a particular access type, certain directives are overwritten as follows:

Local access Access is restricted to locahost (127.0.0.1) IPv4 Access is restricted to locahost (::1) IPv6 Force SSL disabled (# disables lines)	Order Deny,Allow Deny from all Allow from 127.0.0.1 Allow from ::1 #RewriteCond %{SERVER_PORT} !=443 #RewriteRule ^ https://localhost:443%{REQUEST_URI} [NS,R,L]
Intranet + passwords Access is restricted to locahost (127.0.0.1) and Intranet (192.168) IPv4 Access is restricted to locahost (::1) IPv6 Force SSL disabled (# disables lines)	Order Deny,Allow Deny from all Allow from 127.0.0.1 192.168 Allow from ::1 #RewriteCond %{SERVER_PORT} !=443 #RewriteRule ^ https://localhost:443%{REQUEST_URI} [NS,R,L]
Intranet + passwords +ssl Access restriction removed (# disables lines) allows everyone access Force SSL enabled (removed # enables lines)	#Order Deny,Allow #Deny from all #Allow from 127.0.0.1 #Allow from ::1 RewriteCond %{SERVER_PORT} !=443 RewriteRule ^ https://localhost:443%{REQUEST_URI} [NS,R,L]

File config.inc.php

When selecting a particular access type, certain directives are overwritten as follows:

Local access Automatically use root user password, allowing transparent access.	/* Authentication section */ $cfg['Servers'][$i]['auth_type'] = 'config'; // Authentication method (config, http or cookie based)? $cfg['Servers'][$i]['user'] = 'root'; // MySQL user $cfg['Servers'][$i]['password'] = $password; // MySQL password (only needed with 'config' auth_type) $cfg['Servers'][$i]['AllowNoPassword'] = false; // Must use password
Intranet + passwords and Internet + passwords +ssl Force all users to enter a name and password.	/* Authentication section */ $cfg['Servers'][$i]['auth_type'] = 'cookie'; // Authentication method (config, http or cookie based)? $cfg['Servers'][$i]['user'] = ''; // MySQL user $cfg['Servers'][$i]['password'] = ''; // MySQL password (only needed with 'config' auth_type) $cfg['Servers'][$i]['AllowNoPassword'] = false; // Must use password

Top

---