Mobile app version of vmapp.org
Login or Join
Yeniel560

: Phpmyadmin http password security Is my password sent unencrypted when using Phpmyadmin through http? If not, is there any downside using http compared to https?

@Yeniel560

Posted in: #Http #Https #Phpmyadmin #Security

Is my password sent unencrypted when using Phpmyadmin through http?
If not, is there any downside using http compared to https?

10.02% popularity Vote Up Vote Down


Login to follow query

More posts by @Yeniel560

2 Comments

Sorted by latest first Latest Oldest Best

 

@Yeniel560

Username and password are sent as plain text during login. After this they are sent in encrypted format in cookies.

You can check this using LiveHTTP Headers plugin in Firefox for example.

10% popularity Vote Up Vote Down


 

@Ogunnowo487

If you are connecting to phpMyAdmin through HTTP then your password (and all your data) is being sent unencrypted.

However, if the form you are using to enter your username/password is sent to an HTTPS script (even though you might be on an unencrypted HTTP page) then it is sent encrypted, but then you would expect to remain on HTTPS for the duration of your session.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme