loading...empty;done;/phpmyadmin-access/:-uriAccess to PHPMyAdmin | iNET.elastic Dev Docs

Managing Access to PHPMyAdmin

The platform allows to flexibly manage access to the phpMyAdmin panel for the MySQL, MariaDB and PerconaDB database servers.

By default, all connections to phpMyAdmin are allowed and, if you want to change such a behaviour, adjust the /etc/httpd/conf.d/phpMyAdmin-jel.conf file. Just, locate the <Directory /usr/share/phpMyAdmin/> section, where the possible configs are described via comments:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

<Directory /usr/share/phpMyAdmin/>
     ##REMOVE THE "Require all granted" STRING BELOW TO RESTRICT THE ACCESS FROM ANY IP EXCEPT SPECIFIED IN THE SECTION BELOW

     Require all granted

     ###UNCOMMENT THE FOLLOWING LINES TO ALLOW ACCESS FROM THE SPECIFIED IP
     ###REPLACE THE xxx.xxx.xxx.xxx WITH THE IP ADDRESS FROM WHICH THE ACCESS IS ALLOWED
     #SetEnvIf X-Forwarded-For ^xxx\.xxx\.xxx\.xxx env_allow_1
     #Require env env_allow_1
     #Require ip xxx.xxx.xxx.xxx
     #Require all denied
</Directory>

Let’s move through it step-by-step:

1. To change the default behavior, which allows all connections, you need to comment/remove the appropriate line, as it is shown in the image below (e.g. using the file configuration manager or via Web SSH):

phpMyAdmin configuration file

2. Next, list the allowed IPs, which should be specified in the following format (you can uncomment the provided templates and specify the correct IP address):

1

Require ip {ipAddress}

configure access for db with public ip

  • if your database node has internal IP only
1
2

SetEnvIf X-Forwarded-For {ipAddress} {varName}
Require env {varName}

Note: In this case you should specify the {ipAddress} in the ^xxx.xxx.xxx.xxx format to be properly processed by Apache. Also, you can use any prefered {varName} variable name, for example env_allow_1.
configure access for db with internal ip only

If needed, you can specify multiple addresses as it is shown in the images above.

3. Uncomment the last line within the section, to deny access from any IP other than specified one(s):

deny access to admin from not listed addresses

4. Save the changes and Restart Nodes of your database server.

restart database nodes

That’s it! Any connection to the phpMyAdmin panel from the IP address, which is not in the allowed list, will lead to the page similar to the following one:

403 forbidden page example

Now, you can be sure that your database admin panel is protected from the unallowed connections.

What’s next?