General Security Issues

Problems with the Windows version of XAMPP, questions, comments, and anything related.

General Security Issues

Postby jmack » 14. January 2005 16:24

Hello-

I just succesfully installed this system on a windows XP computer for a friend of mine. I'm more Linux-server friendly, so I'm wondering what I need to do to secure this site from hackers. Is it soley based on .htaccess files? Or is there a chmod XXX option in windows?

Any help is appreciated.
jmack
 
Posts: 8
Joined: 14. January 2005 15:26

Postby jmack » 14. January 2005 16:35

by the way, I'm behind a firewall

I just notice that when I go to www.mywebsite.com/images/ directory, I can see everything thats there.
jmack
 
Posts: 8
Joined: 14. January 2005 15:26

General Security Issues

Postby jchapel » 15. January 2005 10:41

I'm no expert, just thought I'd help with what I know.

according to what I've read Apache is the most secure server available

There are user accounts in Mercury, Phpmyadmin, Mysql, ect. that need passwords or deletion (ie:newuser,pma, test) Check all modules for default accounts and redo passwords in any .htpasswd files you find.

you can protect directories easily by ensuring it has a index.* file or

There is an Options Tag in httpd.conf found under the default path

C:\apachefriends\xampp\apache\conf\httpd.conf

Look for

Options Indexes FollowSymLinks MultiViews Includes ExecCGI
AddType text/html .shtml
AddHandler server-parsed .shtml
AddHandler cgi-script .cgi .pl

The Indexes parameter is displaying the directory when no index file is found.

You will find the Option directive in Aliases defined also.

Alias /phpmyadmin "C:/apachefriends/xampp/phpmyadmin/"

<Directory "D:/apache/xampp/phpMyAdmin/">
Options Indexes MultiViews ExecCGI
DirectoryIndex index.php
Order allow,deny
Allow from all
</Directory>

for more info goto

http://httpd.apache.org/docs-2.0/mod/core.html#options
J Chapel
The application server in my pocket runs on XAMPP
XAMPP Demo http://xampp.no-ip.info
ZPANEL Demo http://zpanel.no-ip.info
jchapel
 
Posts: 25
Joined: 15. January 2005 09:32

Postby jmack » 16. January 2005 03:48

thanks man. I'll look into it when I get a chance.
jmack
 
Posts: 8
Joined: 14. January 2005 15:26


Return to XAMPP for Windows

Who is online

Users browsing this forum: No registered users and 45 guests