Amazon EC2环境下隐藏phpMyAdmin路由并修改访问路径咨询

Got it, let's walk through how to hide phpMyAdmin's default /phpmyadmin route and switch it to a custom path like /sampleroute on your EC2 instance. The steps depend on which web server you're using—here's how to do it for both Apache and Nginx, the most common options on EC2:

For Apache Web Server #

1. Locate the phpMyAdmin config file
   On Ubuntu/Debian systems, this is usually at /etc/phpmyadmin/apache.conf. For Amazon Linux/RHEL, check /etc/httpd/conf.d/phpmyadmin.conf.
2. Modify the Alias directive
   Find the line that looks like:

   Alias /phpmyadmin /usr/share/phpmyadmin
   

   Change it to your custom route:

   Alias /sampleroute /usr/share/phpmyadmin
   

3. Update the Directory block (if needed)
   Make sure the <Directory /usr/share/phpmyadmin> block matches the path you set in the Alias—this ensures Apache has permission to serve the phpMyAdmin files.
4. Remove or redirect the old route (optional but recommended)
   To block access to the old /phpmyadmin path entirely, add this line after the new Alias:

   Alias /phpmyadmin /dev/null
   

   Or redirect it to your new custom path:

   Redirect permanent /phpmyadmin https://your-domain.com/sampleroute
   

5. Restart Apache
   Run the appropriate command for your system:

   # Ubuntu/Debian
   sudo systemctl restart apache2
   
   # Amazon Linux/RHEL
   sudo systemctl restart httpd
   

For Nginx Web Server #

1. Find your phpMyAdmin configuration
   Look in /etc/nginx/conf.d/phpmyadmin.conf or open your site's config file (usually stored in /etc/nginx/sites-available/your-site.conf).
2. Update the location block
   Replace the existing location /phpmyadmin block with your custom route:

   location /sampleroute {
       root /usr/share/phpmyadmin;
       index index.php index.html index.htm;
   
       location ~ ^/sampleroute/.+\.php$ {
           root /usr/share/phpmyadmin;
           fastcgi_pass unix:/var/run/php/php8.1-fpm.sock; # Adjust PHP version to match your setup
           fastcgi_index index.php;
           fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
           include fastcgi_params;
       }
   }
   

3. Block the old /phpmyadmin path (optional)
   Add this block to prevent anyone from accessing the default route:

   location /phpmyadmin {
       return 404;
   }
   

4. Test and restart Nginx
   First verify your config is error-free:

   sudo nginx -t
   

   If no issues are found, restart Nginx to apply changes:

   sudo systemctl restart nginx
   

Extra Security Tips #

• Choose a custom route that's not obvious (avoid generic names like /admin or /db to reduce brute-force attempts).
• Add HTTP basic authentication to your new phpMyAdmin path—this adds an extra layer of login protection even if someone guesses the route.
• Restrict incoming traffic on port 80/443 in your EC2 security group to only trusted IPs if possible.

内容的提问来源于stack exchange，提问作者Nenad Kaevik