[URGENT] Anyone can go on my PMA w/o Auth

[JasonG]

I've set a password to root & pma, but it doesn't ask for authorization to go on it.

It tells them they are logged in as
User: root@[siteip] or User: root@[sitedomain]
when they go to
http://[siteip]/phpmyadmin/ or http://[sitedomain]/phpmyadmin/

I have to block everyone from accessing the phpMyAdmin page from everyone.

Under the PMA's Privelage page

Code: Select all

pma   localhost   Yes   USAGE   No
root   localhost   Yes   ALL PRIVILEGES   Yes

My last software that I was using was from http://www.devside.net/ but they stopped doing free updates, and it always asked me for Authorization.

With no authorization anyone can go up on my site and mess with my mysql db.

Thanks for any help.

[Sharley]

Is this thread any help?
http://community.apachefriends.org/f/viewtopic.php?t=31516

Where did you set your root password?

Security info is in the readme_en.txt file in the xampp folder.

With no authorization anyone can go up on my site and mess with my mysql db.

Then you have not set your security correctly.

[JasonG]

Oh didn't know I had to restart the Mysql Service

Thanks