Apache Friends Support Forum

I've been a long time user of XAMPP and noticed some really bad problems with the newer versions.

1. include Paths are messed up in PHP. In one particular site, I have an include() that loads a file from a child directory that itself includes another file from in the includes directory: include('config.php'); in order to reference the file in 1.7.7 Win, I have to make it include('includes/config.php); Under older versions (1.7.3) and the linux version of 1.7.7, this works correctly without the path, but in the windows version of 1.7.7, it fails. (Tried on 2 different XP machines and Vista as well)

2. The php command eval() is no longer working correctly, instead, it is acting like echo.

Finally, and this isn't so much a bug as a WTH were you thinking...

3. New security concepts. Dump them. They aren't in the Linux versions and XAMPP isn't for production servers, it's for testing servers, blocking stuff from other machines in a person's local LAN isn't your job, the Linux version realizes this, but the windows version oversteps it's bounds by changing crucial parts of the central project and makes it harder for people to actually use the product.

Uhhh - Wrong...

New security concepts. Dump them. They aren't in the Linux versions

LAMPP - linux 1.7.7

Code: Select all

-rw-r--r--. 1 nobody root  1751 May  8 17:20 httpd-xampp.conf
[root@localhost extra]# tail httpd-xampp.conf
#
<LocationMatch "^/(?i:(?:xampp|security|licenses|phpmyadmin|webalizer|server-status|server-info))">
   Order deny,allow
   Deny from all
   Allow from ::1 127.0.0.0/8 \
      fc00::/7 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 \
      fe80::/10 169.254.0.0/16

   ErrorDocument 403 /error/XAMPP_FORBIDDEN.html.var
</LocationMatch>
[root@localhost extra]#

Windows 1.7.7

Code: Select all

# New XAMPP security concept
#

# Close XAMPP security section here
<LocationMatch "^/(?i:(?:security))">
    Order deny,allow
    Deny from all
    Allow from ::1 127.0.0.0/8
    ErrorDocument 403 /error/HTTP_XAMPP_FORBIDDEN.html.var
</LocationMatch>

# Close XAMPP sites here
<LocationMatch "^/(?i:(?:xampp|licenses|phpmyadmin|webalizer|server-status|server-info))">
    Order deny,allow
    Deny from all
    Allow from ::1 127.0.0.0/8
    ErrorDocument 403 /error/HTTP_XAMPP_FORBIDDEN.html.var
</LocationMatch>

Good Luck

Hi Blackgato,

Blackgato wrote:1. include Paths are messed up in PHP. In one particular site, I have an include() that loads a file from a child directory that itself includes another file from in the includes directory: include('config.php'); in order to reference the file in 1.7.7 Win, I have to make it include('includes/config.php); Under older versions (1.7.3) and the linux version of 1.7.7, this works correctly without the path, but in the windows version of 1.7.7, it fails. (Tried on 2 different XP machines and Vista as well)

very simple, thats because PEAR is in the include path and include paths have higher priviledges for include() then the directory of your included file.
If you don't want to have PEAR in your include path simply remove it in your php.ini (in XAMPP 1.7.7 thats ~line 794).

Blackgato wrote:2. The php command eval() is no longer working correctly, instead, it is acting like echo.

Example code?

best wishes,
Altrea