now if anyone can access phpmyadmin with ipserver/phpMyAdmin
Just user can login to cwp can access phpmyadmin.
How to secure it?
phpMyAdmin has its own login.
You can go to:
Apache settings - Apache redirects (and remove the ones you don't want to have)
But the ones you want are stored on:
/usr/local/apache/conf.d/domain-redirects.conf
Just change the redirect urls if you feel more secure :)
But remember, after you change it, your PhpMyAdmin option on your server is not going to work anymore
phpmyadmin has own login so you don't have to worry. Just don't share your login details to CPpanel and everything will be fine.