Apache Friends Support Forum

Does this picture shows that my apache configuration is secure from people using it as a proxy server?

http://picasaweb.google.com/xfsgpr/Xampp#slideshow/5551153574193391426

Thanks.

this picture shows that minimum secure is done. It doesn't secure your php scripts.
it's suggested NOT to use XAMPP for real server, just for developement.

WilliL wrote:this picture shows that minimum secure is done. It doesn't secure your php scripts.
it's suggested NOT to use XAMPP for real server, just for developement.

Can you recommend a site where I can find out more about how to secure my php scripts.

Thanks.

some excemples
German http://www.tecchannel.de/webtechnik/webserver/2018831/apache_konfiguration_tipps_fuer_sicherheit_security_optimierung_webserver/index2.html
English http://www.phpwact.org/security/web_application_security
English http://www.cgisecurity.com/owasp/html/
English http://www.owasp.org/index.php/Category:Vulnerability

Google search SQL-Injection, Session fixation, hijacking, header injection, CSFR/XSRF attack, Session Riding

don't be afraid a lot to read I think its important to know and most parts can be excluded by validating every input (user, header, url)

Thanks WiliL. Some reading for this Christmas!

Regards and Merry Christmas.