XAMPP accessible from local LAN

[bbalajirao]

Hi,
I have installed XAMPP (ver 1.6.4) on my system running OpenSuse 10.2.

Installation process went smoothly. I ran-

/opt/lampp/lampp security

to set passwords for XAMPP and MySql.

During the security setup, I disabled access to MySql and XAMPP over the network.

Now (after running "lampp security", when I open in a browser -

http://localhost/xampp
OR
http://localhost

the security page shows everything as secure except MySql. It says -

MySQL is accessible by the network
This is a potential or at least theoretical security leak. And if you're mad about security you should disable the network interface of MySQL. UNSECURE

My problems are-
1. phpMyAdmin is accessible from other LAN computers. HOW TO DISABLE NETWORK ACCESSIBILITY OF PHPMYADMIN
2. XAMPP IS STILL ACCESSIBLE FROM NETWORK (in browser from any other lan computer when given URL is http://my IP number) HOW TO DISABLE NETWORK ACCESSIBILITY TO XAMPP? is there any other method?
3. HOW TO DISABLE ACCESS TO MYSQL (DATABASES AND EVERYTHING) FROM NETWORK.

Thanks in advance.
B.Balajirao

[Scory]

1) phpmyadmin: supply passwords to each MySQL User and edit file config.inc.php: look for $cfg['Servers'][$i]['auth_type'] and change value from 'config' to 'cookie'

Anyway, you dont need to do this, if you make Xampp unreachable from LAN (see next issue).

2) Edit httpd.conf configuration file and activate inclusion of vhost-configuration:

Code: Select all

Include conf/extra/httpd-vhosts.conf

This may be already done (or it is commented out via '#' in first column, in that case remove '#').

At next edit file httpd-vhosts.conf and supply different Hosts for local IP (i.e. 127.0.0.1) and Intranet IP (i.e. 192.168.1.1 or similar). Supply different DocumentRoots. You will find lots of examples on http://httpd.apache.org/docs/2.0/de/vho ... mples.html

3) Edit file my.cnf and look for the section '[mysqld]'. Insert a new line with the directive:

Code: Select all

skip-networking

After you finished, restart xampp.

BUT (most important): the script "lampp security" is working INCORRECTLY (this is an issue in a german post here). It will still tell you, that MySQL can be reached via LAN - this message is WRONG! Dont use "lampp security".

Greets
Scory