Limitare l’accesso dall’esterno a phpMyAdmin su Raspberry Pi
Per aumentare la sicurezza sul proprio Raspberry Pi consiglio vivamente di bloccare l’accesso dall’esterno alla pagina web di phpMyAdmin.
Per farlo basta editare il file phpmyadmin.conf .
Per prima cosa dal Terminale digitiamo:
sudo nano /etc/apache2/conf-enabled/phpmyadmin.conf
ora bisognerà aggiungere le tre righe riportate in grassetto
# phpMyAdmin default Apache configurationAlias /phpmyadmin /usr/share/phpmyadmin<Directory /usr/share/phpmyadmin> #do not allow access from the outside world! Order Deny,Allow Deny from All Allow from 172.16.1.222 Options SymLinksIfOwnerMatch DirectoryIndex index.php <IfModule mod_php5.c> <IfModule mod_mime.c> AddType application/x-httpd-php .php </IfModule> <FilesMatch ".+\.php$"> SetHandler application/x-httpd-php </FilesMatch> php_value include_path . php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/:/usr/share/php/php-gettext/:/usr/share/php/php-php-gettext/:/usr/share/javascript/:/usr/share/php/tcpdf/:/usr/share/doc/phpmyadmin/:/usr/share/php/phpseclib/ php_admin_value mbstring.func_overload 0 </IfModule> <IfModule mod_php.c> <IfModule mod_mime.c> AddType application/x-httpd-php .php </IfModule> <FilesMatch ".+\.php$"> SetHandler application/x-httpd-php </FilesMatch> php_value include_path . php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/:/usr/share/php/php-gettext/:/usr/share/php/php-gettext/:/usr/share/javascript/:/usr/share/php/tcpdf/:/usr/share/doc/phpmyadmin/:/usr/share/php/phpseclib/ php_admin_value mbstring.func_overload 0 </IfModule></Directory># Authorize for setup<Directory /usr/share/phpmyadmin/setup> <IfModule mod_authz_core.c> <IfModule mod_authn_file.c> AuthType Basic AuthName "phpMyAdmin Setup" AuthUserFile /etc/phpmyadmin/htpasswd.setup </IfModule> Require valid-user </IfModule></Directory># Disallow web access to directories that don't need it<Directory /usr/share/phpmyadmin/templates> Require all denied</Directory><Directory /usr/share/phpmyadmin/libraries> Require all denied</Directory><Directory /usr/share/phpmyadmin/setup/lib> Require all denied</Directory>
in questa maniera abbiamo ristretto l’accesso alla pagina web di phpmyadmin solo per la macchina con indirizzo IP 172.16.1.222
Ora premiamo CTRL+X per uscire e salvare (ci verrà chiesto di confermare con il tasto INVIO)
A questo punto per rendere effettiva la modifica apportata dobbiamo riavviare il servizio di apache, per cui digitiamo
sudo service apache2 restart