mirror of
https://github.com/usmannasir/cyberpanel.git
synced 2025-10-26 00:36:34 +02:00
1f3d5afe6a
- Updated settings.py to include PhpMyAdminAccessMiddleware for enhanced access control. - Modified phpmyadminsignin.php to check user session and redirect to the login page if not authenticated.
26 lines
636 B
Plaintext
26 lines
636 B
Plaintext
# CyberPanel phpMyAdmin Access Control
|
|
# Place this file as /usr/local/CyberCP/public/phpmyadmin/.htaccess
|
|
|
|
# Enable rewrite engine
|
|
RewriteEngine On
|
|
|
|
# Check if user is not authenticated and redirect to login
|
|
RewriteCond %{HTTP_COOKIE} !sessionid=
|
|
RewriteRule ^(.*)$ /base/ [R=302,L]
|
|
|
|
# Additional security headers
|
|
Header always set X-Frame-Options DENY
|
|
Header always set X-Content-Type-Options nosniff
|
|
Header always set X-XSS-Protection "1; mode=block"
|
|
|
|
# Prevent direct access to sensitive files
|
|
<Files "config.inc.php">
|
|
Order Allow,Deny
|
|
Deny from all
|
|
</Files>
|
|
|
|
<Files "*.log">
|
|
Order Allow,Deny
|
|
Deny from all
|
|
</Files>
|