PMA Auto Login / Prevent users not logged in to access PMA

[joximu]

...
I'm still not sure what's better. Let's see:

+ increasing security by only being able to use pma when logged in into ispcp
+ easy for people who only start the pma out of ispcp (if there are no other passwords needed)

- if pma is *only* available via ispcp, then maybe customers install their own pma in their site and won't update it -> really bad.
- If you're developing on a database application you often need only pma access. For me this would leed to the point above... (my own pma)

So, maybe a good solution:
a) make it possible to start pma directly out of ispcp - without any passwords (since you can change the mysql passwords there is no sense in asking them)
b) let the "/tools/pma" open for the developpers or people who are only interested in pma access... (this is better: you care for an actual version of pma - customers don't)

Make more secure -> use SSL
Maybe put some restrictions in it (root onlöy from your own ip, orwhatever...)

My 4 cents... :-)
Joximu