xampp not secure?

[hub]

Hello,

I am more or less a beginner with html, css and a little bit js, and know I want to start with php to include it in the existing html-code.

1. I hava problems (see below at 2.) with MySQL running after having installed xampp these days many times and deinstalled it again. Searching for postings with similar problems I read also, that xampp isn't sure, that it is an easy door for hackers (I read the case of German costum database). Now, beside the problems of not running MySQL, I wanted to ask whether it is good to download xampp at all, or if there is an alternative to that.


2. Concerning MySQL: I couln't figure out what the accual source of hte problem ist, the problem ist that I can't start MySQL as an Admin and in addition to that I don't get an error log either, the file does either not exist or is empty. For know I have deinstalled the entire xampp again.

Thanks for any hint.
hub.

[Altrea]

Hi hub,

XAMPP has a specific purpose. It is meant and configured as local test and development environment.
Using XAMPP in such an environment is absolutely secure.

What you shall not do is using XAMPP in an live or production environment, so any environment where you want to process external requests you have not full control over.

Related to your MySQL issue, do you get any error messages or log messages in your XAMPP control panel?

best wishes,
Altrea

[hub]

Hi Altrea,

thanks for your answer! I appreciate your help, and sorry, I didn't want to put xampp in question;-) but I was for a moment insecure.

I get following message on the xampp control Panel v3.2.1

20:51:29 [main] Initializing Control Panel
20:51:29 [main] Windows Version: Windows 8 Pro 64-bit
20:51:29 [main] XAMPP Version: 1.8.3
20:51:29 [main] Control Panel Version: 3.2.1 [ Compiled: May 7th 2013 ]
20:51:29 [main] You are not running with administrator rights! This will work for
20:51:29 [main] most application stuff but whenever you do something with services
20:51:29 [main] there will be a security dialogue or things will break! So think
20:51:29 [main] about running this application with administrator rights!
20:51:29 [main] XAMPP Installation Directory: "c:\xampp\"
20:51:29 [main] Checking for prerequisites
20:51:29 [main] All prerequisites found
20:51:29 [main] Initializing Modules
20:51:29 [Apache] XAMPP Apache is already running on port 80
20:51:29 [Apache] XAMPP Apache is already running on port 443
20:51:29 [main] Starting Check-Timer
20:51:29 [main] Control Panel Ready
20:51:37 [Apache] Attempting to stop Apache (PID: 1384)
20:51:37 [Apache] Attempting to stop Apache (PID: 9388)
20:51:37 [Apache] Status change detected: stopped
20:51:53 [Apache] Attempting to start Apache app...
20:51:53 [Apache] Status change detected: running
20:52:06 [mysql] Attempting to start MySQL app...
20:52:07 [mysql] Status change detected: running
20:52:09 [mysql] Status change detected: stopped
20:52:09 [mysql] Error: MySQL shutdown unexpectedly.
20:52:09 [mysql] This may be due to a blocked port, missing dependencies,
20:52:09 [mysql] improper privileges, a crash, or a shutdown by another method.
20:52:09 [mysql] Press the Logs button to view error logs and check
20:52:09 [mysql] the Windows Event Viewer for more clues
20:52:09 [mysql] If you need more help, copy and post this
20:52:09 [mysql] entire log window on the forums

About Administrator: I am logged in as Administrator, says the Windows Benutzerkonten-information. - Xampp is now running on C:\xampp . Before I had it also in my own folder, in order to be on the good side with administrator rights, but MySQL didn't work either. I even downloaded the TweakUAC-programm and tried it without any restrictions concerning registration-rights, but also negativ.

My last hope is your help and systematic questionary to bring it to work.

thanks,
hub.

[hub]

Hello,

I started this morning the xampp Control Panel once more as an Administrator. The xampp package is located on C:\xampp , the admin-rights are on the lowest level (TweakUAC says: "Leave UAC off. That will leave the UAC completely disabled").
MySQL doesn't run.
In the MySQL-line there are no error-logs saying "Die Datei C:\xampp\mysql\data\mysql_error.log kann nicht gefunden werden. Möchten Sie eine eine neue Datei erstellen?".

However I just realised error-logs in the Apache-line of the xampp-CP saying following:

[Mon Aug 04 12:26:45.731382 2014] [ssl:warn] [pid ...:tid ...] AH...: www.example.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Aug 04 12:26:45.804888 2014] [core:warn] [pid ...:tid ...] AH...: pid file C:/xampp/apache/logs/httpd.pid overwritten -- Unclean shutdown of previous Apache

run?
[Mon Aug 04 12:26:45.916962 2014] [ssl:warn] [pid ...:tid ...] AH...: www.example.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Aug 04 12:26:45.950985 2014] [mpm_winnt:notice] [pid ...:tid ...] AH...: Apache/2.4.9 (Win32) OpenSSL/1.0.1g PHP/5.5.11 configured -- resuming normal

operations
[Mon Aug 04 12:26:45.950985 2014] [mpm_winnt:notice] [pid ...:tid ...] AH...: Apache Lounge VC11 Server built: Mar 16 2014 12:13:13
[Mon Aug 04 12:26:45.950985 2014] [core:notice] [pid ...:tid ...] AH...: Command line: 'c:\\xampp\\apache\\bin\\httpd.exe -d C:/xampp/apache'
[Mon Aug 04 12:26:45.960993 2014] [mpm_winnt:notice] [pid ...:tid ...] AH...: Parent: Created child process ...
[Mon Aug 04 12:26:46.480981 2014] [ssl:warn] [pid ...:tid ...] AH...: www.example.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Aug 04 12:26:46.630976 2014] [ssl:warn] [pid ...:tid ...] AH...: www.example.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Aug 04 12:26:46.666000 2014] [mpm_winnt:notice] [pid ...:tid ...] AH...: Child: Starting 150 worker threads.

I replaced the numbers by ..., if you need them I can post them too, just not sure whether it is critical or not.

Then there is PHP error-log saying just this: "[03-Aug-2014 20:38:32 Europe/Berlin] PHP Warning: file_get_contents(lang.tmp): failed to open stream: No such file or directory in C:\xampp\htdocs\xampp\index.php on line 2"

There is yet an Apache Access log, which I thin, is o.k.

Do these information help you to further analysis?

Thanks a lot for your help,
hub.

[hub]

...and additionally to the foregoing posting:

I got a information on the Windows Ereignisanzeige
-Ereignis 100016, DistributedCOM
-Ebene: Fehler

saying now, 04.08.2014 at 12:25:36 :

"Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{...}
und der APPID
{...}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden."

I replaced the serie of numbers and letters by points, to be posted if necessary.

Thanks,

hub.