diff --git a/plugins/phpmyadmin/conf/config.inc.php b/plugins/phpmyadmin/conf/config.inc.php
index 795b4c992..63f278f5a 100644
--- a/plugins/phpmyadmin/conf/config.inc.php
+++ b/plugins/phpmyadmin/conf/config.inc.php
@@ -1,15 +1,15 @@
 <?php
-$cfg['blowfish_secret'] = 'd41d8cd98f00b204e9800998ecf8427e';
+$cfg['blowfish_secret'] = '{$BLOWFISH_SECRET}';
 $i                      = 0;
 $i++;
 $cfg['Servers'][$i]['auth_type'] = 'cookie';
 // $cfg['Servers'][$i]['host']            = '127.0.0.1';
 // $cfg['Servers'][$i]['connect_type']    = 'tcp';
-$cfg['Servers'][$i]['socket']          = '/www/server/mysql/mysql.sock';
+$cfg['Servers'][$i]['socket']          = '{$SERVER_PATH}/mysql/mysql.sock';
 $cfg['Servers'][$i]['connect_type']    = 'socket';
 $cfg['Servers'][$i]['compress']        = false;
 $cfg['Servers'][$i]['AllowNoPassword'] = false;
-$cfg['TempDir']                        = '/www/server/phpmyadmin/tmp';
+$cfg['TempDir']                        = '{$SERVER_PATH}/phpmyadmin/tmp';
 $cfg['UploadDir']                      = '';
 $cfg['SaveDir']                        = '';
 ?>
diff --git a/plugins/phpmyadmin/index.py b/plugins/phpmyadmin/index.py
index 55e509060..dbb8f41b2 100755
--- a/plugins/phpmyadmin/index.py
+++ b/plugins/phpmyadmin/index.py
@@ -97,12 +97,16 @@ def getCachePhpVer():
 def contentReplace(content):
     service_path = mw.getServerDir()
     php_ver = getCachePhpVer()
+    tmp = mw.execShell(
+        'cat /dev/urandom | head -n 32 | md5sum | head -c 16')
+    blowfish_secret = tmp[0].strip()
     # print php_ver
     php_conf_dir = mw.getServerDir() + '/web_conf/php/conf'
     content = content.replace('{$ROOT_PATH}', mw.getRootDir())
     content = content.replace('{$SERVER_PATH}', service_path)
     content = content.replace('{$PHP_CONF_PATH}', php_conf_dir)
     content = content.replace('{$PHP_VER}', php_ver)
+    content = content.replace('{$BLOWFISH_SECRET}', blowfish_secret)
     return content