what do you mean by "get a provisioning system"?
In this context it means a Control Panel system of some sort that can also provision new servers or virtual servers and new users through templating. There are already tools for these things, including Open Source ones. The fact is that 'home-brew' systems that attempt to do these things are inhernetly insecure and troublesome, as there is no way of really testing them adequately -- it is impossible for you to predict the application or security scenrios. You will invariably discover what is wrong with 'the system' through train wrecks. Unfortunately the trainwrecks occur "on your watch". I just got through dealing with a situatuion like this professionally, and the work I did took a week, rather than a day (it did not involve XAMPP or Linux - it was a Windows-based Hosting operation).
You can't really run webhosting, portal or ISP services on LAMPP sucessfully for more reasons than I can enumerate (or have the interest in doing so). Read some of the inquiries here about adding or changing components, and you should get the drift. As XAMPP is Open Source software, so no one can actively prevent you from using it improperly. The project leaders have repeatedly advised everyone "XAMPP is not appropriate for production environments".
These are "my opinions" only, not those of the XAMPP project, however they are based on 25+ years as a systems engineer on Unix, Linux, Windows and 'mainframe' based systems. I run a private ISP and hosting service, so I have a fair amount of insight on these things.