¿Es seguro el XAMPP?

[Reaper45]

Depende de para que lo uses. Si lo usas en un entorno aislado para los enredos que te dé la gana, bien, si pretendes ponerlo de cara a Internet para ofrecer algo, mal. La propia documentación del XAMPP lo dice:

Cita:Security enhancement

The purpose of XAMPP is to be a development environment. It is configured to give the programmer free reign over the toolset with no restrictions. As a result of that freedom of movement, the default XAMPP installation is extremely insecure. For example, there are almost no logins required for anything.

For versions of XAMPP 0.9.5 and later, you can beef up security by running the command:

/opt/lampp/lampp security

You will be prompted with various statements that note the insecurities that exist, and you will be given a choice whether to fix that insecurity. While this makes your XAMPP installation more secure, you should still avoid running XAMPP on a production server.