how to make phpmyadmin accessible from external ips

Question

Hi if im on my server box and i go to localhost/phpmyadmin then i get phpmyadmin fine. But if I try and access it from an external ip by going to mydomain.com/phpmyadmin i get the following error:

Access to the requested object is only available from the local network.
This setting can be configured in the file "httpd-xampp.conf".

What do I need to do to my http-xampp.conf file to make it accessible from external ips?

Thanks

Answer 1

As I don't have an XAMPP installation at the moment I rely on the information I found on the internet.

#New XAMPP security concept

<LocationMatch "^/(?i:(?:xampp|security|licenses|phpmyadmin|webalizer|server-status|server-info))">
    Order deny,allow
    Deny from all
    Allow from ::1 127.0.0.0/8 \
               fc00::/7 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 \
               fe80::/10 169.254.0.0/16

    ErrorDocument 403 /error/XAMPP_FORBIDDEN.html.var
</LocationMatch>

For your task most important are the following lines:

    Allow from ::1 127.0.0.0/8 \
               fc00::/7 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 \
               fe80::/10 169.254.0.0/16

You will have to add the IP adresses which are allowed to access phpmyadmin at the end (behind 169.254.0.0/16). You will also want to have a look at the formats the Allow Directive can process. You will find this in the mod_authz_host Documentation

Answer 2

Just as a heads up, new vulnerabilities are found in PHPMyAdmin on a weekly/monthly basis. If you can help it, it's not something you want accessible via the public internet. I'd recommend keeping your configuration as is, and connecting to it through an ssh tunnel.