Welcome to WebmasterWorld Guest from 126.96.36.199
Forum Moderators: phranque
If your clients do not have FTP access to the phpMyAdmin folder, then you can modify the config.inc.php file to only show a specific database ($cfgServers['only_db'] variable).
If they do have FTP/write access to thta folder, you have to take it onsetp further and create a seperate username/password for each client/database. You can set the config file with a username and password and it will accees the MySql accordingly.
Either way, it sounds like you are letting everone access the database as the root user. You should change this and have a seperate login for each user.
typically there's a config.inc.php and I guess
phpmyadmin installed for each user when not
done in advanced configurations.
You definatately want to change your setup asap
as anyone it appears right now can trash your entire db system or view anyone elses data in its entirety
or get the root password by looking at the config.inc.php file itself
[edited by: txbakers at 1:18 pm (utc) on Jan. 27, 2006]
[edit reason] no sigs, please [/edit]
$cfg['Servers'][$i]['auth_type'] = 'http';
The MySQL username and password are used to login.
When adding new users enter the username, host and password.
Leave all the Global Privileges blank.
Scroll down and click on OK.
A new page should appear if the user was successfully created.
Again leave all the Global Privileges blank.
Select the user database in the Database-specific privileges section.
Click OK if you're not re-directed to the next page.
Select the user privileges in this section.
Now the user should have access for their databases only.