Apache Friends Support Forum

Hello,

I was browsing the English forum and I found that other users are facing the exception error message when exiting the control panel, with XAMPP complaining not being able to write to xampp-control.ini. I was also having this error message today, although I installed XAMPP inside my own user directory, not in the Program Files directory (to avoid access right issues, precisely). Searching elsewhere on the web, I found other users with the same problem, and I found a temporary fix* (see URL below). A user suggested right-clicking the xampp-control.ini file in the XAMPP installation directory, going to Properties > Security > Modify > Everyone, and granting all access. Then you can start and quit the XAMPP control panel as a regular user without having the exception error message popping up. Could someone forward this trick to the XAMPP development team, please? Hopefully this will be fixed for the next update

Thank you and happy coding

* https://stackoverflow.com/questions/38676374/why-xampp-control-panel-shows-an-error-access-denied-upon-launch

Hi,

will not be fixed that way, because it is a workaround against a security issue
https://nvd.nist.gov/vuln/detail/CVE-2020-11107

After doing these steps log out and restart the XAMPP. Then quit XAMPP. Then log in to finally refresh the administrative rules to use XAMPP.
..0O Activate User Privileges O0..
- Go to the XAMPP directory.
- Search for file xampp-control.ini.
- Go to properties of that file.
- Under security tab select users Everyone.
- Edit permissions and provide full control.
- Apply changes.

calande wrote:Hello,A user suggested right-clicking the xampp-control.ini file in the XAMPP installation directory, going to Properties > Security > Modify > Everyone, and granting all access

What are you talking about?

Your solution says about running XAMPP as an admin NOT about granting access to it to everyone!

You are totally mixing up two ideas. Running an app as an admin (an elevated access) is something someone normal (provided that you DO have admin access in your Windows). Granting every PC user an unrestricted access to XAMPP is a security madness beyond my imagination.

It's like opening all your doors and windows and putting "This house is ready for being robbed" sign in your garden.