Newbie Needs some Help

[PartlyRockin]

Hello all! Happy New Year.

I'm learning how to use php and SQL and downloaded XAMPP.

I'm getting mixed signals from around the web:
1. XAMPP is initially setup with everything enabled, so I'm open to attacks/hacking.
2. XAMPP is setup as a local development environment for me to play around w/ servers/php/sql/etc...

So my questions is : am I configured for only my local machine/environment or am I vulnerable to attacks/hacks when I run Apache/MySQL?

thanks

[Altrea]

Hi,

XAMPP is meant for local test and development purposes only. But that does not mean that XAMPP is full secure against outer attacks.
How secure XAMPP really is depends highly on the fact if your XAMPP components are accessible from the internet or not.
So, if you install XAMPP on a VPS, it is vulnerable, because you can reach it from the internet.
XAMPP is also insecure if your PC is directly accessible from the internet or if you forward XAMPP specific ports so that internet requests are routed by your router to your pc.

best wishes,
Altrea

[PartlyRockin]

It's installed on my PC.
However, I'm not sure how to tell if my PC is accessible from the internet or if I'm forwarding XAMPP specific ports.
Know of any resources/info where I can find out?

thanks Altrea

[Altrea]

You should know if you have forwarded ports in your own router. That is nothing you can do by accident.
To be absolutely sure you get to know your current public IP address for example with help of a website like this: http://www.whatsmyip.org/ and then use an open port checker to check for open ports 80, 443, 3306, etc.
There are also open port checker which integrate the check for current public ip like here: http://www.yougetsignal.com/tools/open-ports/