phpmyadmin allows any username and password

I am using phpmyadmin for my site. It's authentication type is cookie. And I set username and password for root user. But now I can login with any username and password. So anyone can access my db. How can I restrict this