[TUT] Securing Xampp - Diabling Webdav

Status
Not open for further replies.

NextToNothing

Member
Dec 5, 2010
52
4
Hey guys,
Im back again with another tutorial. This one im going to show you how to secure your xammp server by disabling webdav. For those people who dont know what webdav is its basically a way in which anyone can upload things to your server. Hackers commonly use this to upload shells to delete all the files on your server and download databases.
So this needs to be disabled so those nasty hackers cant get in.

Lets get started.
Open up Windows Explorer at My Computer. And now open up the hard drive in which you installed xampp on. In my case this is the C:\ drive.


Open up the folder called 'xampp' now.


Next open up the folder 'apache'.


Now open up folder 'conf'.


Then open up the folder named 'extra'.


Locate and find the file named 'httpd-dav' and open the file up in NotePad or any other text based editor of your choice.


Find this code within the file you just opened:
Code:
<Directory "C:/xampp/webdav">
    Dav On

    Order Allow,Deny
    Allow from all


Now we need to replace this code with the following code below;
Code:
<Directory "C:/xampp/webdav">
    Dav Off

    Order Deny,Allow
    Deny from all
You can see what we edited in this image:


So changing this code, it turns Off Webdav and denys all access to it.

Now remember to save the file!


To get the code to work, restart apache on your server. If you try and connect to the webdav server it will tell you that its invalid and cannot connect, this is because webdav is turned off.

Within completing this tutorial you DO-NOT need to delete the folder named 'webdav' within the xampp folder.

Credits:
- All credits goto me, once again :D
- yes, for those people who havent read any of my other tut.
That inclueds text and images...


[mod] Thread moved to "Coding, Internet, & Technology, Coders Paradise, Tutorials, Ki. [/mod]
 
Status
Not open for further replies.

Users who are viewing this thread

Top