# phpMyAdmin - Web based MySQL browser written in php
# 
# Allows only localhost by default
#
# But allowing phpMyAdmin to anyone other than localhost should be considered
# dangerous unless properly secured by SSL

Alias /phpmyadmin /usr/share/phpmyadmin

<Directory /usr/share/phpmyadmin/>
   <IfModule mod_authz_core.c>
     # Apache 2.4
     <RequireAny>
       Require ip 127.0.0.1
       Require ip ::1
     </RequireAny>
   </IfModule>
   <IfModule !mod_authz_core.c>
     # Apache 2.2
     Order Deny,Allow
     Deny from All
     Allow from 127.0.0.1
     Allow from ::1
   </IfModule>
    ErrorDocument 403 "Access denied per /etc/httpd/conf/webapps.d/phpmyadmin.conf"
    php_flag session.auto_start 0
</Directory>

<Directory /usr/share/phpmyadmin/setup/>
   <IfModule mod_authz_core.c>
     # Apache 2.4
     <RequireAny>
       Require ip 127.0.0.1
       Require ip ::1
     </RequireAny>
   </IfModule>
   <IfModule !mod_authz_core.c>
     # Apache 2.2
     Order Deny,Allow
     Deny from All
     Allow from 127.0.0.1
     Allow from ::1
   </IfModule>
    ErrorDocument 403 "Access denied per /etc/httpd/conf/webapps.d/phpmyadmin.conf"
</Directory>

# These directories do not require access over HTTP - taken from the original
# phpmyadmin upstream tarball
#
<Directory /usr/share/phpmyadmin/libraries/>
    <IfModule mod_authz_core.c>
	# Apache 2.4
	<RequireAny>
	    Require all denied
	</RequireAny>
    </IfModule>
    <IfModule !mod_authz_core.c>
	# Apache 2.2
	Order Deny,Allow
	Deny from All
	Allow from None
    </IfModule>
</Directory>

<Directory /usr/share/phpmyadmin/setup/lib/>
    <IfModule mod_authz_core.c>
	# Apache 2.4
	<RequireAny>
	    Require all denied
	</RequireAny>
    </IfModule>
    <IfModule !mod_authz_core.c>
	# Apache 2.2
	Order Deny,Allow
	Deny from All
	Allow from None
    </IfModule>
</Directory>

<Directory /usr/share/phpmyadmin/setup/frames/>
    <IfModule mod_authz_core.c>
	# Apache 2.4
	<RequireAny>
	    Require all denied
	</RequireAny>
    </IfModule>
    <IfModule !mod_authz_core.c>
	# Apache 2.2
	Order Deny,Allow
	Deny from All
	Allow from None
    </IfModule>
</Directory>

# This configuration prevents mod_security at phpmyadmin directories from
# filtering SQL etc.  This may break your mod_security implementation.
#
#<IfModule mod_security.c>
#    <Directory /usr/share/phpmyadmin/>
#        SecRuleInheritance Off
#    </Directory>
#</IfModule>