Click here.

For the unknowing… phpmyadmin is a web-based mysql admin tool. The google query is structured to find installs of phpmyadmin that aren’t password protected. This gives anyone full access to read and modify the database. Also, if the pages were password-protected, Google’s spider wouldn’t have been able to get in to index them in the first place. Ugh.

Filed under: b3st pract1c3s, hax, ugh