Can I stop phpmyadmin from being accessed by IP address?

[dle001]

Hi

I want to stop access phpmyadmin via ip address. (maybe better for stopping attackers)

How to fix it ?
Thank you

[myVesta]

Currently there is no way to do that.
But you can 'assign' phpmyadmin to some subdomain that is known only to you - viewtopic.php?f=8&t=37
The same way (set 'group=youruser' in fpm conf) you can 'unassign' the phpmyadmin from hostname, to stop bots.

[ikheetjeff]

I did it this way:

File: /etc/apache2/conf.d/phpmyadmin.conf

Add this code:

Code: Select all

RewriteEngine On
RewriteCond %{HTTP_HOST} !sub.domain.com$ [OR]
RewriteCond %{REMOTE_ADDR} !^00.00.00.00
RewriteRule (.*) - [R=404]

sub.domain.com is the only domain where phpmyadmin works and 00.00.00.00 is only ip.
I use vesta for myself, which allows for this. if you have multiple users this does not work.