Setting Upa WAMPServer
Setting Upa WAMPServer
Note – the most up-to-date documentation for this session can be found at
www.ntatd.org/mark.
Getting Started:
1. Download the latest XAMPP for Windows package from
http://www.apachefriends.org/en/. I’m using the installer version.
2. Run the installer by double-clicking on it. Take all the defaults except for the
default installation folder (unless you have a reason not to). I install it in
c:\web. The default is c:\program files\xampp, and the space in ‘program
files’ causes problems with paths in some web apps. It won’t install into the
root (c: ) folder. Wait while it installs.
3. I chose to install Apache2 and MySQL as services, but not FileZilla.
4. Test your installation. Open a web browser (I prefer Mozilla Firefox, but this
will work in any browser) and type localhost in the address bar. If you get a
page that says XAMPP, your installation worked.
5. Congratulations! You now have a working WAMP environment.
Well, you now have a working installation, but it is not secure. To secure your WAMP,
open your web browser and go to localhost again. Click a language link at the bottom (I
chose English, obviously). Now click Security on the left-hand menu. A new page will
open and give you the security status of your server.
From http://localhost/security/index.php, you will see several security items for your
server and what their status is. Some of these are very important, some are not. We will
fix the important ones.
Background Information
1. These XAMPP pages are accessible by network for everyone – this means that
anyone on your network can view web pages on your server. Since we are
building a webserver so people can see our web pages, that doesn’t seem like
such a problem to me. The alternative under XAMPP is to set a password for
your webserver. Anyone who tries to see pages on your server will have to
type that password in to get access.
2. The MySQL admin user root has NO password – this is vitally important. If
you don’t set a root password, ANYONE can access your MySQL database as
an administrator. This means they can add data, delete data, or perform SQL
Injection attacks against your server.
5. PHP is NOT running in "safe mode" – I’m not comfortable with safe mode, so
I normally leave this alone. Safe mode turns off some things that most php
programmers take for granted.
Now, let’s fix our security problems. Under the list of security warnings, there is a link:
http://localhost/security/xamppsecurity.php. This will help us fix our problems.
Let’s Do Something!
Now that we have a secure WAMP server, let’s do something fun with it. We’re going to
install a blogging (web log) program called Wordpress. It is very popular among
bloggers, and it’s easy to install and setup.