Recommended Free Tools
To open phpMyAdmin at a hostname such as pma.example.com, configure four separate layers: DNS, the web server, PHP, and HTTPS. Create an A/AAAA record (or a CNAME) that reaches the server or reverse proxy, add an Apache virtual host or nginx server block for that hostname, map it to the phpMyAdmin files and PHP runtime, issue a TLS certificate, and redirect HTTP to HTTPS. DNS alone never makes phpMyAdmin appear.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
The procedure below covers a conventional Apache or nginx installation, including authentication choices, proxy deployments, HTTP/3 caveats, validation tests, and fixes for the failures that most often occur.
As an Amazon Associate I earn from qualifying purchases.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
How the request travels from the subdomain to phpMyAdmin
A browser request for https://pma.example.com passes through several independent decisions:
- DNS resolves the hostname to an IP address or another hostname.
- The edge or reverse proxy, if present, accepts the connection and may terminate TLS.
- Apache or nginx selects the virtual host or server block whose hostname matches the request.
- The file mapping points that host to the phpMyAdmin directory.
- PHP executes phpMyAdmin scripts, either through Apache’s PHP handler or nginx’s PHP-FPM upstream.
- phpMyAdmin authenticates the user and connects to the configured MySQL-compatible server.
A failure at one layer can look like a failure at another. For example, a DNS record can be correct while the default website is displayed because no matching virtual host exists. Conversely, a correctly matched virtual host can still show download prompts when PHP is not being executed.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Prerequisites and decisions before changing DNS
Confirm the application stack
phpMyAdmin is a browser-based PHP application. Its official requirements state that it needs a web server such as Apache, nginx, or IIS, PHP, and a supported MySQL-compatible database. Identify which web server is already serving your website and which PHP version and process manager it uses. Reusing the existing stack is normally safer than installing a second web server on the same ports.
Choose the hostname and exposure model
Pick a name that is easy for administrators to recognize, for example pma.example.com or db-admin.example.com. Treat the name as a public administrative endpoint even if you intend to restrict it by IP address. Decide whether the hostname will connect directly to the server or to a load balancer, CDN, or reverse proxy. The DNS target, TLS certificate location, and forwarded-header settings depend on that choice.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Find the phpMyAdmin directory
Install phpMyAdmin from your operating-system package or an upstream release, then record its absolute filesystem path. Common package layouts differ, so do not assume that a path copied from another distribution is correct. The path used in an Apache Alias, an Apache document root, or an nginx root must contain the application files and be readable by the web-server process. PHP must be enabled for that host.
Plan authentication
phpMyAdmin’s configuration reference lists cookie, config, http, and signon authentication modes. Cookie mode is the default and lets each user enter a MySQL account at the login page. HTTP mode delegates the first authentication step to the web server. Avoid placing a broadly privileged database password in a public configuration file when cookie or HTTP authentication meets your needs; use least-privilege database accounts instead.
Point the subdomain in DNS
Choose the record type
| Record | Use it when | What it contains |
|---|---|---|
| A | The hostname should resolve directly to an IPv4 address. | The public IPv4 address of the server or edge service. |
| AAAA | The service is reachable over IPv6. | The public IPv6 address. |
| CNAME | Your provider gives you a canonical hostname, such as a load balancer endpoint. | The destination hostname, not an IP address. |
In your DNS provider’s zone for example.com, create the chosen record with the host label pma (or the label you selected). Keep the existing proxy, CDN, or DNS-only setting appropriate to your architecture. If both A and AAAA records exist, both address families must reach a correctly configured listener; a broken IPv6 path can make some users report intermittent failures.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Verify resolution before configuring the web server
Use your operating system’s DNS tools, such as dig pma.example.com A, dig pma.example.com AAAA, or nslookup pma.example.com. Check the answer from more than one resolver if a change is still propagating. The returned address should be the server or proxy that is supposed to handle phpMyAdmin, not an old hosting account. DNS TTL controls how long recursive resolvers may cache the old answer; changing the record does not instantly flush every cache.
Do not test only by opening the IP address. Web servers select sites by the Host header (and by SNI for TLS), so an IP-only request commonly displays the default website.
Configure Apache for the subdomain
Create a dedicated HTTP virtual host
Create a separate Apache virtual-host configuration for the chosen name. Replace /path/to/phpmyadmin with the directory found during installation.
<VirtualHost *:80>
ServerName pma.example.com
Alias / /path/to/phpmyadmin/
<Directory /path/to/phpmyadmin/>
Require all granted
AllowOverride None
</Directory>
Redirect permanent / https://pma.example.com/
</VirtualHost>An Alias maps the entire hostname’s URL space to the application directory. You can use a document root instead when phpMyAdmin is the only content in the virtual host. Keep the Directory path synchronized with the alias target, and ensure the PHP handler used by the rest of the site is active for this virtual host. If your distribution supplies a packaged phpMyAdmin Apache include, you may include it rather than duplicating its directives, but the hostname still needs its own matching virtual host.
Add the HTTPS virtual host
<VirtualHost *:443>
ServerName pma.example.com
SSLEngine on
SSLCertificateFile /path/to/fullchain.pem
SSLCertificateKeyFile /path/to/private-key.pem
Alias / /path/to/phpmyadmin/
<Directory /path/to/phpmyadmin/>
Require all granted
AllowOverride None
</Directory>
</VirtualHost>Use the certificate and key paths supplied by your certificate-management process. The certificate must include pma.example.com; a certificate for only the apex domain is not sufficient unless it explicitly contains the subdomain as a subject alternative name. Keep the port 80 host solely for redirecting to HTTPS, and preserve the path and query string during that redirect.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Enable, validate, and reload
- Enable the site configuration and any required Apache SSL and PHP modules using your operating system’s normal method.
- Run Apache’s configuration test (commonly
apachectl configtestorhttpd -t) and correct every syntax error before reloading. - Reload Apache without stopping existing sites.
- Request both
http://pma.example.comandhttps://pma.example.com. The first should return an HTTP redirect; the second should show the phpMyAdmin login page rather than source code or a file download.
Add an Apache authentication layer when appropriate
For an internet-facing administrative endpoint, place an additional web-server gate in front of phpMyAdmin. The official documentation’s Basic Authentication example uses AuthType Basic, AuthName, AuthUserFile, and Require valid-user. A representative directory section is:
<Directory /path/to/phpmyadmin/>
Require all granted
AuthType Basic
AuthName "phpMyAdmin administration"
AuthUserFile /path/outside/webroot/.htpasswd
Require valid-user
</Directory>Adjust the access directives to your Apache version and policy: some configurations use Require valid-user alone, while others combine it with an IP allow-list. Store the password file outside every publicly served directory, and never rely on Basic Authentication without HTTPS because the credentials are otherwise exposed to interception.
Configure nginx for the subdomain
Create the HTTP server block
nginx needs a server block whose server_name exactly matches the DNS name. The example below assumes phpMyAdmin is the document root and that PHP-FPM is available on a Unix socket; substitute your site’s actual socket or upstream.
server {
listen 80;
server_name pma.example.com;
root /path/to/phpmyadmin;
index index.php;
location / {
try_files $uri $uri/ /index.php?$query_string;
}
location ~ .php$ {
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_pass unix:/run/php/php-fpm.sock;
}
location = / {
return 301 https://pma.example.com$request_uri;
}
}Many administrators use a separate port-80 block that redirects every path, then a port-443 block that contains the application locations. That arrangement avoids accidentally serving phpMyAdmin over cleartext while a request is being processed. Make sure your PHP location does not expose raw source files and that static assets, JavaScript, and CSS are served from the same application root.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteCreate the HTTPS server block
server {
listen 443 ssl;
server_name pma.example.com;
root /path/to/phpmyadmin;
index index.php;
ssl_certificate /path/to/fullchain.pem;
ssl_certificate_key /path/to/private-key.pem;
location / {
try_files $uri $uri/ /index.php?$query_string;
}
location ~ .php$ {
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param HTTP_HOST $host;
fastcgi_pass unix:/run/php/php-fpm.sock;
}
}The exact include file and PHP-FPM socket vary by distribution. Confirm that the PHP-FPM user can read the application files and write only to directories that phpMyAdmin explicitly needs for temporary data. Do not make the whole application tree writable by the web-server account.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Handle nginx HTTP/3 correctly
phpMyAdmin documents a hostname issue when nginx HTTP/3 is enabled. In the PHP-FPM location, pass the host explicitly with fastcgi_param HTTP_HOST $host;. A missing host value can affect two-factor authentication and other hostname-dependent behavior. Keep this parameter in the effective server block, not merely in an unused template, and verify the generated configuration after reload.
Test and reload nginx
- Run
nginx -tto validate syntax and certificate paths. - Reload nginx using your system’s service manager.
- Open the HTTPS hostname and confirm that the login form, JavaScript, cookies, and CSS load without mixed-content warnings.
- Perform a small, non-destructive login test before attempting an import or other administrative operation.
Choose phpMyAdmin authentication and database permissions
Cookie authentication
Cookie mode is phpMyAdmin’s default. The login form collects a user’s MySQL-compatible database credentials, and phpMyAdmin stores the session in a browser cookie rather than embedding one shared database password in the public configuration. This is generally the appropriate starting point for multiple administrators, provided the cookie is protected by HTTPS and the database accounts are limited to the privileges each person needs.
HTTP authentication
HTTP mode relies on authentication performed by Apache, nginx, or another web server. It can provide a second barrier before the phpMyAdmin login page and is useful when an organization already manages web-server accounts. It does not replace database permissions: after the HTTP challenge, users still need database credentials unless the deployment is designed for another supported sign-on flow.
Config and sign-on modes
Config mode can place database credentials in phpMyAdmin’s configuration and is therefore unsuitable for a broadly exposed administrative hostname unless the account is tightly restricted and the file is protected. Sign-on mode integrates with an external authentication flow. Select the mode deliberately, document who controls each credential, and keep the phpMyAdmin package current.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Secure the public administrative endpoint
The phpMyAdmin project recommends serving the application over HTTPS only and preferably enabling HSTS. Its guidance states: “Serve phpMyAdmin on HTTPS only. Preferably, you should use HSTS as well, so that you’re protected from protocol downgrade attacks.” Enable HSTS only after HTTPS works reliably for the hostname and you understand the implications for cached browser policy.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
- Remove the
setupdirectory after installation. - Restrict auxiliary
librariesandtemplatespaths so they cannot be browsed or executed directly. - Protect temporary files and ensure they are not inside a publicly indexed directory.
- Use cookie or HTTP authentication instead of a shared, highly privileged password in a public configuration file whenever practical.
- Put an IP allow-list, VPN, or an additional web-server authentication layer in front of the login page when the administrator audience permits it.
- Consider an authentication proxy. The project documentation says: “Consider hiding phpMyAdmin behind an authentication proxy, so that users need to authenticate prior to providing MySQL credentials to phpMyAdmin.”
- Keep phpMyAdmin, PHP, the web server, and the operating system patched.
- Prevent indexing and review access logs for unexpected requests. Robots directives are not an access-control mechanism; enforce restrictions at the proxy or web server.
Validate the complete setup
- DNS: Resolve the A, AAAA, or CNAME record and confirm it reaches the intended edge or host.
- Virtual-host selection: Send a request using the hostname and verify that the phpMyAdmin host, not the default site, answers.
- Certificate: Check that the certificate covers the exact subdomain, chains correctly, and is renewed automatically.
- Redirect: Confirm port 80 returns a permanent redirect to the HTTPS URL without a redirect loop.
- PHP: Verify that the response is rendered HTML, not downloaded PHP source or a server error.
- Session: Log in and confirm that cookies persist across the login request and subsequent page loads.
- Database: Use an account with the intended privileges and verify that only the expected servers and databases are visible.
- Operations: Test a harmless browse action and, if required, a controlled import with a known small file. Check upload limits and timeout settings before a production-sized import.
Troubleshoot the symptoms that matter
DNS resolves, but the old or wrong website appears
Check that the DNS target is the expected server or proxy, then inspect the Apache ServerName or nginx server_name. A typo, an unenabled site file, or a default server that wins the match will display another website. With a proxy, verify that it forwards the original host and that the origin has a matching virtual host.
404 Not Found
Recheck the phpMyAdmin filesystem path, Apache Alias or nginx root, trailing slashes, and file permissions. Confirm that the request is reaching the intended virtual host rather than a similarly named site. Examine the web-server error log while making one request; it usually reveals the path nginx or Apache actually tried.
Free tools Windows power users keep installed
One-click scans. No signup required.
The browser downloads PHP files or shows source code
PHP is not connected to the selected host. Verify Apache’s PHP handler or nginx’s PHP-FPM location, the socket or upstream address, and the SCRIPT_FILENAME value. Reload only after the configuration test passes, then remove any downloaded source copies that may contain sensitive details.
Login loops, rejected cookies, or a blank page behind a proxy
Confirm that TLS termination and forwarding headers preserve the original scheme and host. The application must know that the public URL is HTTPS; otherwise it can issue insecure or mismatched cookies and redirect repeatedly. Review proxy-related phpMyAdmin settings, ensure only trusted proxies can set forwarded headers, and check browser developer tools for the cookie’s domain, path, Secure, and SameSite attributes.
nginx HTTP/3 requests behave differently
Add the documented fastcgi_param HTTP_HOST $host; parameter to the effective PHP-FPM location, reload nginx, and repeat the login and two-factor-authentication tests. Confirm that another include file is not overriding it with an empty host value.
The login page is exposed or indexed
Enforce the HTTPS redirect, restrict the endpoint by network or web-server authentication, remove installation directories, and review the project’s hardening guidance. Search-engine exclusion alone does not prevent direct access; the control must be enforced before phpMyAdmin serves the page.
Apache or nginx: which path should you use?
| Decision point | Apache | nginx |
|---|---|---|
| Existing stack | Prefer it when the site already uses Apache and its PHP handler. | Prefer it when the site already uses nginx and PHP-FPM. |
| Application mapping | Use an Alias or document root plus a matching Directory block. |
Use root or a location mapping and a PHP-FPM location. |
| PHP integration | Uses the enabled Apache PHP handler or a configured upstream. | Passes scripts through FastCGI to PHP-FPM. |
| TLS workflow | Configure certificate directives in the 443 virtual host and redirect port 80. | Configure certificate directives in the 443 server block and redirect port 80. |
| Access control | Directory directives can use Basic Authentication and Require valid-user. |
Use an auth module, proxy, allow-list, or an upstream identity layer appropriate to the deployment. |
| Proxy behavior | Preserve the original host and scheme when forwarding. | Preserve the original host and scheme; explicitly pass HTTP_HOST for the documented HTTP/3 case. |
| Best choice | The administrator already familiar with Apache’s virtual-host and module model. | The administrator already familiar with nginx server blocks and PHP-FPM. |
Neither server is inherently required for a subdomain. The reliable choice is the one already operating your website, with a correctly matched hostname, PHP integration, TLS configuration, and access controls.
Quick Recap
What to remember
- DNS directs
pma.example.com; it does not configure phpMyAdmin. - The web server must map that hostname to the phpMyAdmin files and execute PHP.
- Use a certificate covering the exact subdomain and redirect every HTTP request to HTTPS.
- Cookie authentication is the default; HTTP authentication adds a web-server-controlled gate.
- Keep installation and auxiliary directories protected, use least-privilege database accounts, and add a proxy, VPN, IP restriction, or second authentication layer when the endpoint is public.
- For nginx with HTTP/3, pass
HTTP_HOST $hostto PHP-FPM as documented by phpMyAdmin.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
