Page 1 of 1

[URGENT] Anyone can go on my PMA w/o Auth

PostPosted: 09. October 2008 06:35
by JasonG
I've set a password to root & pma, but it doesn't ask for authorization to go on it.

It tells them they are logged in as
User: root@[siteip] or User: root@[sitedomain]
when they go to
http://[siteip]/phpmyadmin/ or http://[sitedomain]/phpmyadmin/

I have to block everyone from accessing the phpMyAdmin page from everyone.

Under the PMA's Privelage page
Code: Select all
pma   localhost   Yes   USAGE   No
root   localhost   Yes   ALL PRIVILEGES   Yes


My last software that I was using was from http://www.devside.net/ but they stopped doing free updates, and it always asked me for Authorization.

With no authorization anyone can go up on my site and mess with my mysql db.

Thanks for any help.

PostPosted: 09. October 2008 06:50
by Sharley
Is this thread any help?
http://community.apachefriends.org/f/viewtopic.php?t=31516

Where did you set your root password?

Security info is in the readme_en.txt file in the xampp folder.

With no authorization anyone can go up on my site and mess with my mysql db.
Then you have not set your security correctly.

PostPosted: 09. October 2008 07:03
by JasonG
Oh didn't know I had to restart the Mysql Service

Thanks