phpMyAdmin 설정 주의 사항

http://www.phpmyadmin.net/documentation/#quick_install

If you don't like setup or want to fine tune resulting configuration, open (or create in case of starting from scratch) config.inc.php in your favorite editor and fill in there values for host, user, password and authentication mode to fit your environment. Look at libraries/config.default.php how these fields should be defined.

1. ./libraries/config.default.php 파일을 복사해서 ./config.inc.php 로 만들고 내용을 수정한다.


http://www.phpmyadmin.net/documentation/#authentication_modes

2. IIS 에서는 'cookie' authentication mode 를 사용하는게 좋다.

'cookie' authentication mode

You can use this method as a replacement for the HTTP authentication (for example, if you're running IIS).
Obviously, the user must enable cookies in the browser.
With this mode, the user can truly logout of phpMyAdmin and login back with the same username.
If you want to login to arbitrary server see $cfg['AllowArbitraryServer'] directive.
As mentioned in the requirements section, having the mcrypt extension will speed up access considerably, but is not required.


3. 'cookie' authentication mode 를 사용하기 위해서는 ./config.inc.php 의 다음 항목을 수정해야 한다.
blowfish 에서 사용할 string 을 적어주고, (내부적으로 사용하는 string 이니 무엇을 적어도 상관은 없다. ex: 'myhyun')
auth_type 을 'cookie' 로 변경해 준다.

$cfg[blowfish_secret] string
Starting with version 2.5.2, the 'cookie' auth_type uses blowfish algorithm to encrypt the password.
If you are using the 'cookie' auth_type, enter here a random passphrase of your choice. It will be used internally by the blowfish algorithm: you won't be prompted for this passphrase. The maximum number of characters for this parameter seems to be 46.

$cfg['Servers'][$i]['auth_type'] string ['HTTP'|'cookie'|'config']
Whether config or cookie or HTTP authentication should be used for this server.
'config' authentication ($auth_type = 'config') is the plain old way: username and password are stored in config.inc.php.
'cookie' authentication mode ($auth_type = 'cookie') as introduced in 2.2.3 allows you to log in as any valid MySQL user with the help of cookies. Username and password are stored in cookies during the session and password is deleted when it ends. This can also allow you to login in arbitrary server if $cfg['AllowArbitraryServer'] enabled.
'HTTP' authentication (was called 'advanced' in older versions) ($auth_type = 'HTTP') as introduced in 1.3.0 allows you to log in as any valid MySQL user via HTTP-Auth.
Please see the install section on "Using authentication modes" for more information.