securing phpmyadmin.

[daydreamer]

I have put phpmyadmin on my webspace, but the web host does not allow me to set username/password via the .htaccess and .htpasswd files.

 

at the moment I am using (in the phpmyadmin config.inc):

$cfg['Servers'][$i]['auth_type'] = 'cookie';
$cfg['blowfish_secret'] = 'aphrase';

 

and also changed the phpmyadmin default folder to another name.

 

When I browse to this folder using my web browser, phpmyadmin asks me for my username and password to the mysql database. (But also warns me "Cannot load mcrypt extension. Please check your PHP configuration.").

 

I am using SSL so when I access phpmyadmin it is always via https:// .

 

Is this enough to secure my phpmyadmin/database?

[corbin]

Yeah, you should be fine.