{"id":7386,"date":"2023-02-28T07:12:10","date_gmt":"2023-02-28T13:12:10","guid":{"rendered":"https:\/\/www.knownhost.com\/kb\/?p=7386"},"modified":"2026-01-23T06:31:57","modified_gmt":"2026-01-23T12:31:57","slug":"preventing-phpmyadmin-bruteforcing-directadmin","status":"publish","type":"post","link":"https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/","title":{"rendered":"Prevent PHPMyAdmin Bruteforcing in DirectAdmin By Restricting Its Access"},"content":{"rendered":"\n<p>It is quite common to see automated attempts to locate PHPMyAdmin URLs for the purpose of bruteforcing when perusing the webserver access logs and domain logs. You can eliminate the threat of attacker success by restricting access to PHPMyAdmin to the panel only. This will require that a user is already logged into the DirectAdmin panel before they can access PHPMyAdmin.<\/p>\n\n\n\n<p>This is beneficial for multiple reasons, the primary being that it limits the angle of attack on the phpMyAdmin installation as provided by DirectAdmin. While at the same time, making it easier for you or your users to access phpMyAdmin as it involves enabling SSO (Single Sign On).<\/p>\n\n\n\n<p>We&#8217;ll be configuring this with the following. This will be done over SSH so if you need to know how to access your server read our &#8220;<a href=\"https:\/\/www.knownhost.com\/kb\/how-to-connect-with-ssh\/\">How to connect with SSH<\/a>&#8221; guide.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>  cd \/usr\/local\/directadmin\/\r\n  .\/directadmin set one_click_pma_login 1 restart\r\n  cd custombuild\r\n  .\/build update\r\n  .\/build set phpmyadmin_public no\r\n  .\/build phpmyadmin<\/code><\/pre>\n\n\n\n<p>With this set, the following is now true:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>phpMyAdmin is no longer publicly accessible<\/li>\n\n\n\n<li>Single Sign On is enabled<\/li>\n\n\n\n<li>phpMyAdmin will auto-login for the user<\/li>\n<\/ul>\n\n\n\n<p>More information on the auto-login feature can be found in our &#8220;<a href=\"https:\/\/www.knownhost.com\/kb\/how-to-enable-auto-login-for-phpmyadmin-via-directadmin\/\">How to enable auto login for phpmyadmin via directadmin<\/a>&#8221; article.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p>We&#8217;ve gone over how to prevent bruteforcing in phpMyAdmin. Enabling this option will help you eliminate an attack vector and the traditional method to log in to the phpMyAdmin interface using a username and password.<\/p>\n\n\n\n<p>KnownHost offers 365 days a year, 24 hours a day, all 7 days of the week best in class technical support. A dedicated team ready to help you with requests should you need our assistance. You\u2019re not using KnownHost for the best webhosting experience? Well, why not? Check with&nbsp;<a href=\"https:\/\/www.knownhost.com\/contact\">our Sales team<\/a>&nbsp;to see what can&nbsp;<a href=\"https:\/\/www.knownhost.com\/\">KnownHost<\/a>&nbsp;do for you in improving your webhosting experience.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It is quite common to see automated attempts to locate PHPMyAdmin URLs for the purpose of bruteforcing when perusing the webserver access logs and domain logs. You can eliminate the threat of attacker success by restricting access to PHPMyAdmin to the panel only. This will require that a user is already logged into the DirectAdmin [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[96],"tags":[659,128,258],"class_list":["post-7386","post","type-post","status-publish","format-standard","hentry","category-directadmin","tag-bruteforcing","tag-directadmin","tag-phpmyadmin"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Prevent phpMyAdmin Brute Force Attacks in DirectAdmin | KnownHost<\/title>\n<meta name=\"description\" content=\"Learn with KnownHost on how to prevent phpMyAdmin Bruteforcing on your DirectAdmin control panel by restricting the access to internal users.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Prevent phpMyAdmin Brute Force Attacks in DirectAdmin | KnownHost\" \/>\n<meta property=\"og:description\" content=\"Learn with KnownHost on how to prevent phpMyAdmin Bruteforcing on your DirectAdmin control panel by restricting the access to internal users.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/\" \/>\n<meta property=\"og:site_name\" content=\"KnownHost\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-28T13:12:10+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-23T12:31:57+00:00\" \/>\n<meta name=\"author\" content=\"Jonathan K. W.\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jonathan K. W.\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/preventing-phpmyadmin-bruteforcing-directadmin\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/preventing-phpmyadmin-bruteforcing-directadmin\\\/\"},\"author\":{\"name\":\"Jonathan K. W.\",\"@id\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/#\\\/schema\\\/person\\\/3db6e20d1f33519cd68fe0ba1230a48b\"},\"headline\":\"Prevent PHPMyAdmin Bruteforcing in DirectAdmin By Restricting Its Access\",\"datePublished\":\"2023-02-28T13:12:10+00:00\",\"dateModified\":\"2026-01-23T12:31:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/preventing-phpmyadmin-bruteforcing-directadmin\\\/\"},\"wordCount\":299,\"keywords\":[\"bruteforcing\",\"directadmin\",\"phpmyadmin\"],\"articleSection\":[\"DirectAdmin\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/preventing-phpmyadmin-bruteforcing-directadmin\\\/\",\"url\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/preventing-phpmyadmin-bruteforcing-directadmin\\\/\",\"name\":\"Prevent phpMyAdmin Brute Force Attacks in DirectAdmin | KnownHost\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/#website\"},\"datePublished\":\"2023-02-28T13:12:10+00:00\",\"dateModified\":\"2026-01-23T12:31:57+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/#\\\/schema\\\/person\\\/3db6e20d1f33519cd68fe0ba1230a48b\"},\"description\":\"Learn with KnownHost on how to prevent phpMyAdmin Bruteforcing on your DirectAdmin control panel by restricting the access to internal users.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/preventing-phpmyadmin-bruteforcing-directadmin\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/preventing-phpmyadmin-bruteforcing-directadmin\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/preventing-phpmyadmin-bruteforcing-directadmin\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Prevent PHPMyAdmin Bruteforcing in DirectAdmin By Restricting Its Access\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/#website\",\"url\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/\",\"name\":\"KnownHost\",\"description\":\"KnownHost provides a comprehensive webhosting knowledge base to help answer many of your common webhosting and linux questions.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.knownhost.com\\\/kb\\\/#\\\/schema\\\/person\\\/3db6e20d1f33519cd68fe0ba1230a48b\",\"name\":\"Jonathan K. W.\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f432b99e6651fe8d1deb57a285bd84e806f1c9ae8b4c6c585d7e3a0b33789ad9?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f432b99e6651fe8d1deb57a285bd84e806f1c9ae8b4c6c585d7e3a0b33789ad9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f432b99e6651fe8d1deb57a285bd84e806f1c9ae8b4c6c585d7e3a0b33789ad9?s=96&d=mm&r=g\",\"caption\":\"Jonathan K. W.\"},\"sameAs\":[\"https:\\\/\\\/www.knownhost.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Prevent phpMyAdmin Brute Force Attacks in DirectAdmin | KnownHost","description":"Learn with KnownHost on how to prevent phpMyAdmin Bruteforcing on your DirectAdmin control panel by restricting the access to internal users.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/","og_locale":"en_US","og_type":"article","og_title":"Prevent phpMyAdmin Brute Force Attacks in DirectAdmin | KnownHost","og_description":"Learn with KnownHost on how to prevent phpMyAdmin Bruteforcing on your DirectAdmin control panel by restricting the access to internal users.","og_url":"https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/","og_site_name":"KnownHost","article_published_time":"2023-02-28T13:12:10+00:00","article_modified_time":"2026-01-23T12:31:57+00:00","author":"Jonathan K. W.","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Jonathan K. W.","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/#article","isPartOf":{"@id":"https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/"},"author":{"name":"Jonathan K. W.","@id":"https:\/\/www.knownhost.com\/kb\/#\/schema\/person\/3db6e20d1f33519cd68fe0ba1230a48b"},"headline":"Prevent PHPMyAdmin Bruteforcing in DirectAdmin By Restricting Its Access","datePublished":"2023-02-28T13:12:10+00:00","dateModified":"2026-01-23T12:31:57+00:00","mainEntityOfPage":{"@id":"https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/"},"wordCount":299,"keywords":["bruteforcing","directadmin","phpmyadmin"],"articleSection":["DirectAdmin"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/","url":"https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/","name":"Prevent phpMyAdmin Brute Force Attacks in DirectAdmin | KnownHost","isPartOf":{"@id":"https:\/\/www.knownhost.com\/kb\/#website"},"datePublished":"2023-02-28T13:12:10+00:00","dateModified":"2026-01-23T12:31:57+00:00","author":{"@id":"https:\/\/www.knownhost.com\/kb\/#\/schema\/person\/3db6e20d1f33519cd68fe0ba1230a48b"},"description":"Learn with KnownHost on how to prevent phpMyAdmin Bruteforcing on your DirectAdmin control panel by restricting the access to internal users.","breadcrumb":{"@id":"https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.knownhost.com\/kb\/preventing-phpmyadmin-bruteforcing-directadmin\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.knownhost.com\/kb\/"},{"@type":"ListItem","position":2,"name":"Prevent PHPMyAdmin Bruteforcing in DirectAdmin By Restricting Its Access"}]},{"@type":"WebSite","@id":"https:\/\/www.knownhost.com\/kb\/#website","url":"https:\/\/www.knownhost.com\/kb\/","name":"KnownHost","description":"KnownHost provides a comprehensive webhosting knowledge base to help answer many of your common webhosting and linux questions.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.knownhost.com\/kb\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.knownhost.com\/kb\/#\/schema\/person\/3db6e20d1f33519cd68fe0ba1230a48b","name":"Jonathan K. W.","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f432b99e6651fe8d1deb57a285bd84e806f1c9ae8b4c6c585d7e3a0b33789ad9?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f432b99e6651fe8d1deb57a285bd84e806f1c9ae8b4c6c585d7e3a0b33789ad9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f432b99e6651fe8d1deb57a285bd84e806f1c9ae8b4c6c585d7e3a0b33789ad9?s=96&d=mm&r=g","caption":"Jonathan K. W."},"sameAs":["https:\/\/www.knownhost.com"]}]}},"_links":{"self":[{"href":"https:\/\/www.knownhost.com\/kb\/wp-json\/wp\/v2\/posts\/7386","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.knownhost.com\/kb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.knownhost.com\/kb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.knownhost.com\/kb\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.knownhost.com\/kb\/wp-json\/wp\/v2\/comments?post=7386"}],"version-history":[{"count":1,"href":"https:\/\/www.knownhost.com\/kb\/wp-json\/wp\/v2\/posts\/7386\/revisions"}],"predecessor-version":[{"id":8030,"href":"https:\/\/www.knownhost.com\/kb\/wp-json\/wp\/v2\/posts\/7386\/revisions\/8030"}],"wp:attachment":[{"href":"https:\/\/www.knownhost.com\/kb\/wp-json\/wp\/v2\/media?parent=7386"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.knownhost.com\/kb\/wp-json\/wp\/v2\/categories?post=7386"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.knownhost.com\/kb\/wp-json\/wp\/v2\/tags?post=7386"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}