How do I secure phpMyAdmin and my database?

Your database holds everything on your site, so protecting it and the phpMyAdmin tool used to manage it is important.

Good practices:

• Access phpMyAdmin only through the DirhamHost control panel at my.dirhamaday.ae. Because it is behind your panel login (ideally with two-factor authentication), it is not left exposed on a public URL.
• Use strong, unique database passwords. Create database users with the panel's password generator and never reuse them.
• Grant least privilege. Give each application's database user only the rights it needs; avoid using a single all-powerful user everywhere.
• Protect application config files such as WordPress's wp-config.php, which contains the database password (permissions 600/640, and deny web access via .htaccess).
• Never expose the database to remote connections unless you truly need it; if you do, restrict remote MySQL to specific trusted IPs.

Also keep regular backups (DirhamVault) so a database can be restored if it is corrupted or compromised.

If you spot unexpected database changes, spammy records, or a leaked database password, change the password immediately and contact our 24/7 team on WhatsApp +971 58 553 6767 or support@dirhamaday.ae. We can help review access and restore a clean copy if needed.