[Help] xampp security concept.

[DaiMinzz]

Hi all,

I have a problem, everybody can join the phpmyadmin of my hotel.
I saw some one said change things at httpd-xampp.conf
but i dont know what i need to do. please help

sorry for bad English.

 

[Kaz]

It can be done however never done it myself.
Why not install navicat and remove phpmyadmin alltogether

 

[Xenous]

go to the c/xampp/apache/conf/extra/http-xampp or w.e and edit this

#
# New XAMPP security concept
#
<LocationMatch "^/(?i:(?:xampplicenses|security|phpmyadmin|webalizer|server-status|server-info))">
    Order deny,allow
    Deny from all
    Allow from ::1 127.0.0.0/8
              fc00::/7 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
              fe80::/10 169.254.0.0/16

    ErrorDocument 403 /error/HTTP_XAMPP_FORBIDDEN.html.var
</LocationMatch>

with this

#
# New XAMPP security concept
#
<LocationMatch "^/(?i:(?:xampplicenses|phpmyadmin|webalizer|server-status|server-info))">
    Order deny,allow
    allow from all
        ErrorDocument 403 /error/HTTP_XAMPP_FORBIDDEN.html.var
</LocationMatch>

restart xampp and you should be all good
had to know this from my old uber days

 

[DaiMinzz]

Thanks for help, it works

 

[Weezy]

yea it should work

 

[Brennen]

Ah no, Dai, now Ic ant edit the DB at all! Grrrgle I wont be able to edit anything! Change it back, you just have to change the password. Urgh.

 

[Xenous]

Ah no, Dai, now Ic ant edit the DB at all! Grrrgle I wont be able to edit anything! Change it back, you just have to change the password. Urgh.

You do realise the code i put in actually allows you too edit the db from any pc if they have the mysql pw -.-

 

[Brennen]

no, it says acess denied, we were doing it the way you explained.

 

[Weezy]

# # New XAMPP security concept # <LocationMatch "^/(?i?:xampplicenses|security|phpmyadmin|webalizer|server-status|server-info))"> Order deny,none Deny from none Allow from all ErrorDocument 403 /error/HTTP_XAMPP_FORBIDDEN.html.var </LocationMatch>

 

[Weezy]

it looked better when i was typing

 

[Satan]

Okay. iReplaced The Code, But It's Still Saying Error 403 When I Change The Path From, "Localhost" To My Hamachi IP. ("5.162.180.116")