Web Server
Web Server
After the installation is complete, you will find XAMPP under Start | Programs | XAMPP. You can use the XAMPP Control Panel to start/stop all server and also install/uninstall services.
The XAMPP control panel for start/stop Apache, MySQL, FilaZilla & Mercury or install these server as services.
www.nat32.com). It is
As you know this from older XAMPP versions, you can also use some batchfiles to start/stop the servers: Apache & MySQL start:
\xampp\xampp_start.exe
Test After starting of Apache (and MySQL), go to the address http://localhost/ or http://127.0.0.1/ in your browser and examine all of the XAMPP examples and tools.
As with the add-ons, install the upgrade directly into the XAMPP directory (e.g. "C:\xampp"). And you must also start the setup script "setup_xampp.bat".
The MySQL administrator (root) has no password. The MySQL daemon is accessible via network. phpMyAdmin is accessible via network. The XAMPP demopage is accessible via network. The default users of Mercury and FileZilla are known.
All points can be a huge security risk. Especially if XAMPP is accessible via network and people outside your LAN. It can also help to use a firewall or a (NAT-) router. In case of a router or firewall, your pc is normally not accessible via network. It is up to you to fix these problems. As a small help there is the "XAMPP Security console". Please secure XAMPP before publishing anything online. A firewall or an external router are only sufficient for low levels of security. For slightly more security, you can run the "XAMPP Security console" and assign passwords. If you want have your XAMPP accessible from the internet, you should go to the following URI which can fix some problems: http://localhost/security/
With the security console you can set a password for the MySQL user "root" and phpMyAdmin. You can also enable a authentication for the XAMPP demopages.
This web based tool does not fix any additional security issues! Especially the FileZilla FTP server and the Mercury mail server you must secure yourself. If you don't need these servers, don't start them. A server which is not started, is very secure!
A new subdirectory for your web? Just make a new directory (e.g. "new") inside the directory "\xampp\htdocs" (best without whitespaces and only ASCII), create a test file in this directory and access it with "http://localhost/new/test.php". Further specifics: HTML:
Executable: Allowed => basic package SSI: Executable: Allowed => basic package CGI: Executable: Allowed => basic package PHP: Executable: Allowed => basic package Perl: Executable: Allowed => basic package Apache::ASP Perl: Executable: Allowed => basic package JSP Java: Executable: Allowed => Tomcat add-on Servlets Java: Executable: Allowed => Tomcat add-on
endings:
.html
\xampp\htdocs .htm
endings:
\xampp\htdocs .shtml
\xampp\htdocs endings:
and
\xampp\cgi-bin .cgi
\xampp\htdocs endings:
and
\xampp\cgi-bin .php
\xampp\htdocs endings:
and
\xampp\cgi-bin .pl
endings:
\xampp\htdocs .asp
\xampp\tomcat\webapps\java endings:
(e.g.) .jsp
(e.g.) (u.a)
The standard filename for the Apache function "DirectoryIndex" is "index.html" or "index.php". Every time you are just browsing to a folder (e.g. "http://localhost/xampp/"), and Apache can find such a file, Apache is displaying this file instead of a directory listing.
What is where?
Configuration files File (Directory) Usage The main configuration file for Apache. It's including \xampp\apache\conf\httpd.conf other files from the subdirectory "extra". The configuration file for the FileZilla FTP server. It's \xampp\FileZillaFTP\FileZilla configured with the application "FileZilla Server Server.xml Interface.exe" (button "Admin" in CP). The configuration file for the Mercury SMTP server. \xampp\MercuryMail\mercury.ini It's configured with the application "mercury.exe" (button "Admin" in CP). \mysql\bin\my.ini The configuration file for the MySQL Server. \xampp\php\php.ini The configuration file for PHP. \xampp\phpMyAdmin\config.inc.php The configuration file for phpMyAdmin. The configuration file for msmtp (sendmail \xampp\sendmail\sendmail.ini compatible interface). \xampp\webalizer\webalizer.conf The configuration file for the Webalizer.
Logfiles File (Directory) Usage The error log from Apache. Additional files can be in the \xampp\apache\logs\error.log same directory (if enabled). \xampp\FileZillaFTP\Logs The logfiles from FileZilla FTP server (if enabled). In subdirectories of this files are the logfiles from the several \xampp\MercuryMail\LOGS\ Mercury SMTP server modules.
The error log from MySQL. Additional files can be in the same directory (if enabled). \xampp\sendmail\sendmail.log The logfile from msmtp (sendmail compatible interface). \xampp\mysql\data\mysql.err common directories File (Directory) \xampp\anonymous \xampp\cgi-bin \xampp\htdocs \xampp\MercuryMail\MAIL \xampp\mysql\data \xampp\webdav Usage Download directory for anonymous FTP access. For the CGI scripts. There are the files from your homepage. The mail postboxes. The databases. The directory for WebDAV access (if enabled).