Run the MySQL security hardening script Set a strong root MySQL password Firewall the MySQL port to the localhost Firewall phpMyAdmin to Campus and VPN (or just VPN)