Disable phpmyadmin Admin user

[oliverm]

Hi,

I've just got phpmyadmin and its working fine, and people can log on using a mysql user account.

However, i noted that you can also log on using the username 'admin' with a blank password (i found this by looking at the htpasswd.setup file in the /etc/phpmyadmin dir).

Now, whatever I do, you can always log on to phpmyadmin with user and a blank pass. Delete the line from htpasswd.setup, you can still logon. Change the password using htpasswd, you can still log on. I can't find any mention of the 'admin' user in mysql or its databases/tables.

How can I prevent someone logging on as admin ?

Olly

[glitzi85]

What are you talking about? Either we are talking about login in phpMyAdmin (on the website) or you have enabled the authentification in Apache for phpMyAdmin. So where can you log in with admin and a blank password?

The users and rights are set in PMA:

Log in to phpMyAdmin (as root) and select Privileges from the tab bar. There you can see all users for MySQL (and therefor also phpMyAdmin). Do you see the admin user with No password?

glitzi