Security issues after zpanel->sentora upgrade

[Vedran B]

If you want any user without logging access phpmyadmin.

Then create a subdomain for phpmyadmin and put the files there. ( notice sentora won't update it any more ).

M B

Hi Me.B,

Thanks for the tip, but i acctually wanted to strengthen the security some more.
I have to correct myself, the code i wrote about in my post and added to phpmyadmins php file will not work properly.

A better way I found for restricting the access is adding the following code to the: /etc/sentora/panel/etc/apps/phpmyadmin/index.php

Code:

$ref = $_SERVER['HTTP_REFERER'];
if($ref !== 'http://panel-url-of-yoursite.com/?module=phpmyadmin')
 die("<h1>Unauthorised request!</h1><p>You must be logged in before you are able to view this page.</p>");