Re: [users@httpd] phpmyadmin auth

2013-07-09 Thread Pol Hallen
thanks all for replies :-) I think aboout vpn, ssl and auth. What about auth cookies? Pol - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] phpmyadmin auth

2013-07-09 Thread Jim Albert
On 7/9/2013 5:46 PM, Jim Albert wrote: On 7/9/2013 5:21 PM, Jerry K wrote: configure a local VPN, and only allow access from the VPN IP range is one possible "Plan B". Reviewing my own log files, its amazing how many malware hits there are for this particular software product. What ever you do

Re: [users@httpd] phpmyadmin auth

2013-07-09 Thread Jim Albert
On 7/9/2013 5:21 PM, Jerry K wrote: configure a local VPN, and only allow access from the VPN IP range is one possible "Plan B". Reviewing my own log files, its amazing how many malware hits there are for this particular software product. What ever you do, be as safe/secure as you can. Good Lu

Re: [users@httpd] phpmyadmin auth

2013-07-09 Thread Jerry K
configure a local VPN, and only allow access from the VPN IP range is one possible "Plan B". Reviewing my own log files, its amazing how many malware hits there are for this particular software product. What ever you do, be as safe/secure as you can. Good Luck Jerry On 07/ 9/13 03:56 PM,

Re: [users@httpd] phpmyadmin auth

2013-07-09 Thread David Guerra
Then I'd just use SSL and htpasswd to block access. On Tuesday, July 9, 2013, Pol Hallen wrote: > > Lock down to IP only and use SSL. You can't get any better than that. > > hi and thanks for reply :-) > > I can't :-( Users has dynamic IP > > Pol > > > ---

Re: [users@httpd] phpmyadmin auth

2013-07-09 Thread Pol Hallen
> Lock down to IP only and use SSL. You can't get any better than that. hi and thanks for reply :-) I can't :-( Users has dynamic IP Pol - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-

Re: [users@httpd] phpmyadmin auth

2013-07-09 Thread David Guerra
Lock down to IP only and use SSL. You can't get any better than that. On Tue, Jul 9, 2013 at 4:24 PM, Pol Hallen wrote: > Hey all! This is my first post :-) > > I need allow access of phpmyadmin to some users but I'm not sure which > type of authentication use... > > Is it a good idea use ssl

[users@httpd] phpmyadmin auth

2013-07-09 Thread Pol Hallen
Hey all! This is my first post :-) I need allow access of phpmyadmin to some users but I'm not sure which type of authentication use... Is it a good idea use ssl with client certificates? I see also auth cookie (debian 7 libapache2-mod-auth-memcookie) which should be best "secure" way to do this