Quantcast

Don't have an account? Register Now! Forgot password?

Posted Comments
How-TosSecurity Considerations on
How To: Host Your Blog at Home

Posted 09/04/2007 at 11:53:06am

I would just like to mention that I think port forwarding MySQL (336) is completely unnecessary and presents an unwelcomed security risk. With this configuration, MySQL and apache reside on the same server, negating the need for any remote administration. Even opening port 336 (MySQL) in step 2, on the Windows Firewall is unnecessary as all connections to "localhost" are not blocked. Remote database administration can just as easily be done through phpmyadmin. However, this tool can also pose a security risk. I don't think XAMPP limits access to this directory. Placing the following text in a file called .htaccess in the xampp/phpmyadmin directory *should* do the trick: # ------------------------------------- Order allow, deny Deny from all Allow from localhost Allow from 127.0.0.1 # ------------------------------------- Disclaimer: I'm rusty with .htaccess and this may not work as desired. It is not a foolproof method of security but it should limit unwanted incursions into your database. -- Stux

This Month's Issue
FEATURE Windows XP/Vista/7 Tips!FEATURE Monitor Roundup: 7 LCDs ReviewedHOW TOMaster PhotoshopFEATUREAMD's Awesome New GPUWHITE PAPEROrganic LEDs