phpMyAdmin

If you use config auth_type in current setup script, it shows following red
message:

You set config authentication type and included username and password for
auto-login, which is not a desirable option for live hosts. Anyone who
knows phpMyAdmin URL can directly access your phpMyAdmin panel. Set
authentication type to cookie or http. If you feel this is necessary, use
additional protection settings - host authentication settings and trusted
proxies list. However, IP-based protection may not be reliable if your IP
belongs to an ISP where thousands of users, including you, are connected
to.

I guess this is strong enough warning.

By the way, for Ed and anyone else who finds this thread:
http://wiki.cihar.com/pma/auth_types -- this is exactly how the 'config'
auth_type is supposed to work. Perhaps 'cookie' or 'http' are what you
need.

@windkiel and @lem9: I agree with windkiel to not remove 'config' and that
the default of 'cookie' is a good move.

lol @The real question is: how can we convince users to read
Documentation.html?

>Should we abandon the 'config' auth mode?
no!
I use to have it in a folder with resticted access to my LAN and I dont
like to login at all
But making auth_type = cookie default (pma3.1) is the right step!

Moved to feature requests.

The real question is: how can we convince users to read Documentation.html?
or even: Should we abandon the 'config' auth mode?