It seems there are lots of ways to do startup messages in Linux. In my CyberPanel 2.0.3 running on Ubuntu 20.04 on Azure, the CyberPanel-specific messages seem to come from
/etc/profile.d/cyberpanel.sh
Just noticed this on my new CyberPanel 2 build 3 machine. Very concerning. Fortunately I am able to limit access to port 8090 (and thus phpMyAdmin) to my IP address.
I spent some time trying to force phpMyAdmin to expire the logon cookie after 1…
I'm restricting port 8090 to only my IP address at the host level (Azure). Hopefully that will block access to both the CyberPanel UI as well as PhpMyAdmin.