Prevent users from login to phpmyadmin...

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Hi,

I have mysql and I also installed phpmyadmin to manage it, I created a user and data base for him so he could install forum, for example but I would like to prevent him to login directly into phpmyadmin panel, how I can achive this? Is there any security vulnerabilities and what is actually a minimum of the privileges that I should give him from this below (picture) so that he still could have done installations?



Regards
Sebastian

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Will the user be on the internal network?

NB

 

Probably not, is it make a different, I'm testing so can you explain me in both cases ;)

Reg

 

This might be useful to you.

In case you're wondering how that affects phpMyAdmin:
"Many people have difficulty understanding the concept of user management with regards to phpMyAdmin. When a user logs in to phpMyAdmin, that username and password are passed directly to MySQL. phpMyAdmin does no account management on its own (other than allowing one to manipulate the MySQL user account information); all users must be valid MySQL users."
From here

 

phpmyadmin is just a GUI for managing your mysql databases. It's useful because you don't have to use the command prompt to alter/update/administrate your tables etc. Instead, you use the phpmyadmin interface which runs the MySQL queries on the back-end based on the actions you take.

The point here is that having phpmyadmin isn't going to allow anyone to do anything they couldn't do previously through the command prompt if they had access to your database login information etc. You still have to have a user account to administrate the database in the first place.

 

Ditto to this. phpmyadmin is just an interface.