I've just discovered that password protection for phpPgAdmin may not be
functioning if the postgres config file isn't set to require passwords.
It's sure easy to check, just type in postgres as a username and a
bogus password and it still works! The quick, but dirty, fix is to
change the default directory to some other name.
Frank Hilliard
http://frankhilliard.com/