Open file as super user
sudo gedit /opt/lampp/etc/extra/httpd-xampp.conf
It will looks like this
1:  <IfDefine PHP4>  
2:  LoadModule php4_module    modules/libphp4.so  
3:  </IfDefine>  
4:  <IfDefine PHP5>  
5:  LoadModule php5_module    modules/libphp5.so  
6:  </IfDefine>  
7:  # Disabled in XAMPP 1.8.0-beta2 because of current incompatibilities with Apache 2.4  
8:  # LoadModule perl_module    modules/mod_perl.so  
9:  Alias /phpmyadmin "/opt/lampp/phpmyadmin"  
10:  Alias /phpsqliteadmin "/opt/lampp/phpsqliteadmin"  
11:  # since XAMPP 1.4.3  
12:  <Directory "/opt/lampp/phpmyadmin">  
13:    AllowOverride AuthConfig Limit  
14:    Order allow,deny  
15:    Allow from all  
16:  </Directory>  
17:  <Directory "/opt/lampp/phpsqliteadmin">  
18:    AllowOverride AuthConfig Limit  
19:    Order allow,deny  
20:    Allow from all  
21:  </Directory>  
22:  # since LAMPP 1.0RC1  
23:  AddType application/x-httpd-php .php .php3 .php4  
24:  XBitHack on  
25:  # since 0.9.8 we've mod_perl  
26:  <IfModule mod_perl.c>  
27:      AddHandler perl-script .pl  
28:            PerlHandler ModPerl::PerlRunPrefork  
29:            PerlOptions +ParseHeaders  
30:      PerlSendHeader On  
31:  </IfModule>  
32:  # demo for mod_perl responsehandler  
33:  #PerlModule Apache::CurrentTime  
34:  #<Location /time>  
35:  #   SetHandler modperl  
36:  #   PerlResponseHandler Apache::CurrentTime  
37:  #</Location>  
38:  # AcceptMutex sysvsem is default but on some systems we need this  
39:  # thanks to jeff ort for this hint  
40:  #AcceptMutex flock  
41:  #LockFile /opt/lampp/logs/accept.lock  
42:  # this makes mod_dbd happy - oswald, 02aug06  
43:  # mod_dbd doesn't work in Apache 2.2.3: getting always heaps of "glibc detected *** corrupted double-linked list" on shutdown - oswald, 10sep06  
44:  #DBDriver sqlite3  
45:  #  
46:  # New XAMPP security concept  
47:  #  
48:  <LocationMatch "^/(?i:(?:xampp|security|licenses|phpmyadmin|webalizer|server-status|server-info))">  
49:       Order deny,allow  
50:       Deny from all  
51:       Allow from ::1 127.0.0.0/8 \  
52:  fc00::/7 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 \  
53:  81.196.40.94/32  
54:       ErrorDocument 403 /error/XAMPP_FORBIDDEN.html.var  
55:  </LocationMatch>  
2. Change according to red colored changes
1: <IfDefine PHP4> 2: LoadModule php4_module modules/libphp4.so 3: </IfDefine> 4: <IfDefine PHP5> 5: LoadModule php5_module modules/libphp5.so 6: </IfDefine> 7: # Disabled in XAMPP 1.8.0-beta2 because of current incompatibilities with Apache 2.4 8: # LoadModule perl_module modules/mod_perl.so 9: Alias /phpmyadmin "/opt/lampp/phpmyadmin" 10: Alias /phpsqliteadmin "/opt/lampp/phpsqliteadmin" 11: # since XAMPP 1.4.3 12:<Directory "/opt/lampp/phpmyadmin">13:AllowOverride AuthConfig Limit14:Require all granted15:Order allow,deny16:Allow from all17:</Directory>18: <Directory "/opt/lampp/phpsqliteadmin"> 19: AllowOverride AuthConfig Limit 20: Require all granted 21: Order allow,deny 22: Allow from all 23: </Directory> 24: # since LAMPP 1.0RC1 25: AddType application/x-httpd-php .php .php3 .php4 26: XBitHack on 27: # since 0.9.8 we've mod_perl 28: <IfModule mod_perl.c> 29: AddHandler perl-script .pl 30: PerlHandler ModPerl::PerlRunPrefork 31: PerlOptions +ParseHeaders 32: PerlSendHeader On 33: </IfModule> 34: # demo for mod_perl responsehandler 35: #PerlModule Apache::CurrentTime 36: #<Location /time> 37: # SetHandler modperl 38: # PerlResponseHandler Apache::CurrentTime 39: #</Location> 40: # AcceptMutex sysvsem is default but on some systems we need this 41: # thanks to jeff ort for this hint 42: #AcceptMutex flock 43: #LockFile /opt/lampp/logs/accept.lock 44: # this makes mod_dbd happy - oswald, 02aug06 45: # mod_dbd doesn't work in Apache 2.2.3: getting always heaps of "glibc detected *** corrupted double-linked list" on shutdown - oswald, 10sep06 46: #DBDriver sqlite3 47: # 48: # New XAMPP security concept 49: # 50:<LocationMatch "^/(?i:(?:xampp|security|licenses|phpmyadmin|webalizer|server-status|server-info))">51:Order deny,allow52:Allow from all53:ErrorDocument 403 /error/XAMPP_FORBIDDEN.html.var54:</LocationMatch>
Then restart the XAMPP again.
If you consider about security, do not use this method

 
Amazing ! I am so happy that I found this article. You have posted the complete solution for new xampp security. This article is of great help to me and I will do share it with all my friends too.
ReplyDeletedigital certificate