PhpMyAdmin Hacked, Result = "Cannot start session without errors"

VipX1 · 11-19-2010, 12:28 PM

I have in my apache logs thousands of failed attempts to gain access to phpmyadmin. As shown below a robot must have tried all these one after another. I had fail to ban on a previous server but not this one.
Anyway my real phpmyadmin alias will not work now.
I get this error:
"Cannot start session without errors, please check errors given in your PHP and/or webserver log file and configure your PHP installation properly."
Anyone seen this before?

Code:

[Thu Nov 18 23:35:21 2010] [error] [client 121.192.8.35] File does not exist: /var/www/domain/phpMyAdmin-2.8.2
[Thu Nov 18 23:35:21 2010] [error] [client 121.192.8.35] File does not exist: /var/www/domain/phpMyAdmin-2.8.0.4
[Thu Nov 18 23:35:21 2010] [error] [client 121.192.8.35] File does not exist: /var/www/domain/phpMyAdmin-2.8.0.3
[Thu Nov 18 23:35:21 2010] [error] [client 121.192.8.35] File does not exist: /var/www/domain/phpMyAdmin-2.8.1
[Thu Nov 18 23:35:21 2010] [error] [client 121.192.8.35] File does not exist: /var/www/domain/phpMyAdmin-2.8.1-rc1
[Thu Nov 18 23:35:21 2010] [error] [client 121.192.8.35] File does not exist: /var/www/domain/phpMyAdmin-2.8.0.2
[Thu Nov 18 23:35:21 2010] [error] [client 121.192.8.35] File does not exist: /var/www/domain/phpMyAdmin-2.8.0.1
[Thu Nov 18 23:35:21 2010] [error] [client 121.192.8.35] File does not exist: /var/www/domain/mysql-admin

bathory · 11-19-2010, 06:00 PM

This is usual. It's due to bots trying various phpmyadmin combinations in order to gain access to your phpMyadmin installation.
The error you get is most likely due to wrong permissions.

Look better in the logs to see if you find real php errors, or set

Code:

display_errors = on

in php.ini, restart the web server and watch your browser for errors when visiting the phpMyadmin url

Regards