The Full Story Behind Our Recent Disaster

[Phaze]

My preference is running it and changing the alias to something that is not /phpmyadmin or /pma. I would also use fail2ban to pick up any brute force attempts and IP ban clients that are caught doing so, the same system I use to ban SSH and webmail brute force attempts.

Yeah I did those both (I notice the bots also look for things like "/admin" too) but I still felt too skittish about having it around. At least this way I don't need to worry about keeping it up-to-date and not relying on obscurity to protect my server. Not being a popular server that serves lots of users every month helps

Is web design just a bunch of acronyms?

Yes, you become a professional sysadmin/web designer by memorizing all 17576 TLAs and appropriately applying them in the right order.