securing phpMyAdmin - localhost and ssh OR 2 factor authentication with internet accessible url?

A

Anonymous

Guest
What would you recommend for securing access to phpMyAdmin? I am the developer and need remote access to phpMyAdmin which is on a server in another country (a linux machine with a LAMP stack at the owners office). At the moment for development it's just an internet accessible url and a username and password.

a) restrict access to phpMyAdmin to localhost and ssh into the server to get access
b) Allow access via an internet url and use 2 factor authentication (probably Google Authenticator)
c) keep it as username and password with public url and use a crazy long password to protect against brute force
 
Use c and don’t tell anybody what the url is.

If it’s possible, rename PHPMyAdmin to something obscure.

And keep that a secret too.
 
You must log in or register to reply here.
Back
Top