Page 1 of 1

New XAMPP security concept error

PostPosted: 24. June 2011 15:31
by vlahul
I tried to acces my xamp directory from internet, and i fot thia error:

Access forbidden!

New XAMPP security concept:

Access to the requested directory is only available from the local network.

This setting can be configured in the file "httpd-xampp.conf".

If you think this is a server error, please contact the webmaster.

Error 403
........


How to fix that?

Thanks.

Re: New XAMPP security concept error

PostPosted: 25. June 2011 01:30
by Sharley
vlahul wrote:How to fix that?
It is not broken so it does not need to be "fixed" - it is working exactly as it is intended and giving you any instructions in this open forum would be a security breach and could potentially jeopardize millions of other unsuspecting XAMPP users all over the world.

The files and folders outside of the Apache web server DocumentRoot (htdocs) are inaccessible from the Internet for very good security reasons - this would allow anyone who can access your server the ability to access, using scripting, any part of your PC and so could result in your PC and server becoming yet another zombie machine which would potentially be able to wreak havoc for other unsuspecting Internet users.

My advise is not to tamper with the security settings in the above mentioned configuration file but rather place the files and folders you wish to give Internet access to in the \xampp\htdocs folder.

You may wish to read this section...
A matter of security (A MUST READ!)
...in the \xampp\readme_en.txt file.