[HELP] Xampp Security
- Thread starter Jake
- Start date
thecuriousangel
Member
- Jun 10, 2011
- 105
- 8
use 127.0.0.1 for managing your hotels via offline, not via WAN ip.
it's a new security concept to help people overcome defacements, or even worst, DB DROPPING!!! --just my 2 penny
-------------------------- Post merged 5 minutes after original post. ---------------------------
edit: even local IP cannot gain access to specific xampp pages, for example:
192.168.1.122 > cannot access the xampp security pages,
only 127.0.0.1 and localhost are allowed to access tho
---
why you need security pages? move them to another folder tho
it's a new security concept to help people overcome defacements, or even worst, DB DROPPING!!! --just my 2 penny
-------------------------- Post merged 5 minutes after original post. ---------------------------
edit: even local IP cannot gain access to specific xampp pages, for example:
192.168.1.122 > cannot access the xampp security pages,
only 127.0.0.1 and localhost are allowed to access tho
---
why you need security pages? move them to another folder tho
You need to change the security rule in C:\xampp\apache\conf\extra\http-xampp.conf
Change the last rule to:
#
# New XAMPP security concept
#
<LocationMatch "^/(?i
?:xampp|security|licenses|phpmyadmin|webalizer|server-status|server-info))">
Order allow,deny
Allow from all
ErrorDocument 403 /error/HTTP_XAMPP_FORBIDDEN.html.var
</LocationMatch>
Change the last rule to:
#
# New XAMPP security concept
#
<LocationMatch "^/(?i
?:xampp|security|licenses|phpmyadmin|webalizer|server-status|server-info))">Order allow,deny
Allow from all
ErrorDocument 403 /error/HTTP_XAMPP_FORBIDDEN.html.var
</LocationMatch>
Jake
Member
- May 26, 2010
- 60
- 0
- Thread starter
- #4
use 127.0.0.1 for managing your hotels via offline, not via WAN ip.
it's a new security concept to help people overcome defacements, or even worst, DB DROPPING!!! --just my 2 penny
-------------------------- Post merged 5 minutes after original post. ---------------------------
edit: even local IP cannot gain access to specific xampp pages, for example:
192.168.1.122 > cannot access the xampp security pages,
only 127.0.0.1 and localhost are allowed to access tho
---
why you need security pages? move them to another folder tho
Well I fixed it, you gotta edit the conf-xampp file.. in the apache directory
thecuriousangel
Member
- Jun 10, 2011
- 105
- 8
chill bro, you are about to open a security hole that will be a potential to get the hotel hacked, we must secure evrything and let it as is... use localhost to access security pages
