0

I am trying out the jelastic platform to run wordpress on. In the past I have used a VPS to do this and then use SSH to do anything on my database.

I notice that the platform gives you Phpmyadmin to do mysql administration and as this only asks for a username and password, isn't this a security issue?

Is there a way to either disable the phpmyadmin portal or at least firewall access to this, so only my ip address can access the portal?

Chris.Edwards
  • 9
  • 2
  • You should probably ask the support folks for assistance with your question, since this is about disabling some pre-installed portion of their particular PaaS stack. – Isaac Bennetch Dec 01 '17 at 13:42

1 Answers1

2

You are right to a point - it can be a security issue. This is one case where it's a trade between convenience and security: you must decide what is the right balance for your particular use case.

Jelastic gives you access to the Apache config on the MySQL node (so you can configure HTTP auth, or IP based restrictions - or even disable phpMyAdmin entirely if you don't need it). You also have the ability to customise the firewall rules (e.g. to restrict phpMyAdmin access to your own office IP address).

One note about the firewall rules - unless you add public IP to your MySQL node (not recommended), you will be accessing via the Jelastic resolver (shared proxy) so you cannot selectively block this way (the IP that connects to phpMyAdmin is the proxy, not your office IP).

I recommend to consult with your provider's support team to get exact assistance for your particular needs.

Damien - Layershift
  • 1,508
  • 8
  • 15