XAMPP Security

I've been running XAMPP for almost 2 years, quite honestly on the default settings and I've never even had a hiccup with it. If you want to take steps to secure it even more, there's nothing wrong with that. Do what will make you more comfortable. Right or wrong with how my settings are, I don't loose any sleep over it. My config is XAMPP on Windows 7.

Theoretically every open port can be a security issue. Concerning XAMPP: 1) When developing code you usually do not open it 24/7 which reduces the possibility of being attacked. 2) Usually you sit behind a NAT-router which makes it impossible for others to access your computer without you (or your apps) opening a connection. A web server would have to have port forwarding configuered in order to be accessible. 3) I could go on with alike things. Just make sure you 1) change the default passwords (mysql root user), 2) open it via a trusted network (e.g. from home, not Starbucks) with NAT. Also make sure you don't write PHP scripts that expose or manipulate your entire filesystem, but that's obvious I guess. ;-) See: http://rferdian45.wordpress.com/2013/04/26/xampp-configuration-to-secure-mysql-phpmyadmin-and-localhost/

Kevin Korte: The fact that you haven't experienced hiccups doesn't mean your system isn't compromised. ;-)

That is a good point Georg. I've read it's possible to set XAMPP so that it will only accept connections from my computer which would add an extra level of security. The University's network is well managed I just don't want to be the one person that crashed it running a web server.

Trust me: you won't be that person if they knew what they were doing setting it up. :-)

Thank you for your input. I will set up XAMPP. The University's network is certainly much more secure than my home one with its ISP supplied modem/router combo device. My data is backed up to the University shared drive and if something goes wrong the campus network manager is a friend of mine so I might escape with my head intact :).

I have taken all the steps suggested above. Additionally, I did not install filezilla or mercury as they should not be needed for the exercises here. Moreover the Apache and MySQL services will not be running if I am not working. So between that and the University's network security, my computer should be safe. Is there such a thing as a best answer in this forum?