I went to the page
http://localhost/security/index.php
and after entering a username and password, I clicked on "Make safe the XAMPP directory" button
The message said:
SUCCESS: The XAMPP directory is protected now! All personal data was safed in the following file:
C:\Program Files\xampp\security\xamppdirpasswd.txt
C:\Program Files\xampp\security\xampp.users
C:\Program Files\xampp\htdocs\xampp\.htaccess
The correct English grammar should be "All personal data was saved" (not safed)
I *LOVE* XAMPP, and I am just helping you (in a very small way) to make it even better !