Skip to content

Commit f2fa653

Browse files
committed
Additional security recommendation to hide errors from the login page
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
1 parent 76c3a48 commit f2fa653

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

docs/setup.rst

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1248,6 +1248,8 @@ are always ways to make your installation more secure:
12481248
phpMyAdmin, you can use :config:option:`$cfg['Servers'][$i]['AllowDeny']['rules']` to limit them
12491249
or :config:option:`$cfg['Servers'][$i]['AllowRoot']` to deny root user access.
12501250
* Enable :ref:`2fa` for your account.
1251+
* Consider hiding connection errors from the login page by setting
1252+
:config:option:`$cfg['Servers'][$i]['hide_connection_errors']` to true.
12511253
* Consider hiding phpMyAdmin behind an authentication proxy, so that
12521254
users need to authenticate prior to providing MySQL credentials
12531255
to phpMyAdmin. You can achieve this by configuring your web server to request

0 commit comments

Comments
 (0)