Securing XAMPP! HELP!

[rashvir]

Morning,

I'm in need of URGENT HELP. I'm thinking of developing a program which is for online users but i do not know how to secure my XAMPP Server. Can anyone please help me? I have managed to make the XAMPP Server to listen to port 443 but what else do i need to do? I would appreciate any help please!

[yguru]

Please note that XAMPP is NOT for production use. In case you use it for this purpose anywhere, I suggest to strip out unneeded libaries and modules from httpd.conf and php.ini.

I run a minimalistic Apache 2.2 with the following Includes:

Code: Select all

LoadModule alias_module modules/mod_alias.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule auth_digest_module modules/mod_auth_digest.so
LoadModule authn_default_module modules/mod_authn_default.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authz_default_module modules/mod_authz_default.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule dir_module modules/mod_dir.so
LoadModule include_module modules/mod_include.so
LoadModule info_module modules/mod_info.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule mime_module modules/mod_mime.so
LoadModule mime_magic_module modules/mod_mime_magic.so


More information: http://httpd.apache.org/docs/2.2/mod/

In php.ini, you can include or comment out (with a #) the modules you need in the extenstion= section. More information: http://de3.php.net/manual/en/ref.apache.php (in the left column you can select the modules.)