Author Topic: myurl/phpmyadmin fowards to my real ip with phpmyadmin login screen.  (Read 36 times)

0 Members and 2 Guests are viewing this topic.

Online
*
Hello,

Can someone tell me how to prevent cwp from forwarding requests from https://mysite.com/pwa or https://mysite.com/phpmyadmin to my server ip such as http:123.132.123.123:2031/pma that gives access to anyone to my phpmyadmin login screen?

I know this is probably meant to make it easier for users, but it's a security hole since hackers can brute force indefinitely there. There is no block on failed login attempts.

Offline
*****
Look under WebServer Settings > Apache Redirects. You can get rid of some redirects there.
Or WebServer Settings >WebServers Template Editor > httpd > Clone "default.tpl" and remove the various pma redirect lines that concern you.

Online
*
works thanks.