Server Configuration
Database Administration Tools Access Check
Tools like phpMyAdmin, Adminer, or phpPgAdmin are prime targets. Detect their presence and learn how to effectively protect them against unauthorised access.
What this test checks
This test checks whether database administration tools like phpMyAdmin, Adminer, phpPgAdmin, or others are publicly accessible. These tools provide a graphical interface for managing your databases. Their exposure without strong authentication is critical: an attacker can access all your data, modify it, delete it, or even take control of your server.
Our recommendation
Protect access to these tools with strong authentication. Place them outside your site's public directory (e.g., /usr/share/phpmyadmin) and use an alias in the server configuration. Limit access by IP address (e.g., only your IP). Use a complex password and enable two‑factor authentication if possible. If you don't use these tools, uninstall them permanently.
Security tests
Read more
Sensitive Files