making xampp more secure - windows

does anyone know of a detailed security checklist somewhere to make xampp more secure for windows vista. I know about changing passwords and the basics, but I want to make sure my system is not vulnerable and I have a short time frame on a project. Thanks!!!

I just read through this guide and it covers all of the security necessities for xampp:
http://bravo.newnetenterprises.com/wordpress/xampp/the-basics-of-xampp-security/
Also, you may want to consider putting a firewall in front of the server, Untangle is a nice open source solution for that

Related

Roll out ExtLib and stuff on a Domino Server

Maybe a stupid question but I asked myself if there is a more convienient way to roll out ExtLib, SBT and so on on a Domino Server than just copy the content of all those updatesite.zip to the directory.
The updatesite-way is very cool for the clients but for the server?
I really appreciate your comments & suggestions :-)
Starting with 8.5.3 there is a way to automatically install extlib on servers using an updatesite application. Check this for detailled instructions.

Password protect uninstallation of Firefox Addon using SDK

Background to this problem: Within out company we are working on an add-on to help us do some nifty things. To make it easier to administer we would like to have a password required to at minimum remove the add-on, but probably also to disable it.
I've seen this achieved in for example Public Fox but this is non-sdk style add-on. So my question is if there's an easy way to do this using the SDK? I've looked through the docs but I haven't found anything, probably because I don't know what I'm looking for.
To anticipate the question "why not use that add-on as well?" I think it's enough of a hassle to make sure everyone has one add-on installed, let alone two.
If you want to lock users down, what you're really looking for is a deployment technique where your Firefox deployment installs your extension by default, and to an area of the hard drive that the user does not have write/delete access to. See the Mozilla Wiki for more details on ESR builds and enterprise deployments:
https://wiki.mozilla.org/Deployment:Deploying_Firefox#Firefox_Customization_.28CCK_and_Repackaging_Tools.29

iDisk-like features on Lion Server

The imminent death of iDisk is a bummer. I have used it for years to easily share files with clients without asking them to boot up their FTP software.
I am curious to know if there is a way to mimic iDisk's file sharing features through Lion Server. Specifically, the ability to share links to specific files and have them downloaded through a web browser. I miss the clean interface of iDisk through MobileMe.
I realize that there are third party providers like Dropbox and YouSendIt, but it would be nice to serve the files directly from our local server. I originally thought WebDav might be the answer, but it seems that's not the case.
You will have to install additional software to get that functionality. I've used and had good luck with Boxroom (http://boxroom.rubyforge.org/) but it requires Rails which may be too much work to install if you don't need it for anything else.
Searching for "open source php file manager" turns up a range of options which should work well on Lion as it has PHP already installed. I have also seen Java alternatives, some of which run on top of WebDAV, so it is probably best to start with the development language you are most comfortable with deploying and work from there.
Sorry I couldn't be more specific, my Mini is in transit so I haven't had direct experience with Lion server yet:)
Have a look at Storage Made Easy Mac client. It works a similar way to the original iDisk but also had sync capability. See: https://storagemadeeasy.com/MacCloudTools/ and https://storagemadeeasy.com/wiki/maccloudtools/. There is a native disk piece and also a sync like dropbox piece to the App.

Remote Wipe application in android

Is there any Remote wipe application which will be working on deleting the data in Emulator by sending an SMS from other emulator?? I found some of the free applications in android market on Remote Wipe.. But they are not working..
Please let me know if any of the application is working on Emulator
Thanks in advance
Uday
There is just one remote wipe application I have come across.
I have been trying to write one such application myself but I believe the permissions required are 2nd level and 3rd level permissions (check this link and this link). Thats is the reason I am unsuccessful as yet. I believe that you basically need to sign the package with the same signature as the OEM manufacturer to be able to grant those packages to your device.
If by an stroke of luck you do happen to make one successfully, please let us know the permission you have used to make such a thing possible! =)
Regards
Shouvik
EDIT: Okay I supposed I am wrong. I believe in android 2.2 it is possible to remote wipe your. I have not completely understood how to implement the function or the class yet, I plan to work on it as soon as I can spare some time. :)
Reply:
Well I have been looking at the SDK for some time now, and I can confidently tell you below 2.2, I am pretty sure there is no way I know of to remote wipe your data. I have although read on the mailers list that there is a function that enables a third party client to create a remote wipe application as you may have seen in my post above. I have actually use my own port of android on a device and have just used the brick, but if I do come across any reference that can show how you could achieve what you desire, I would be happy to leave a post here. Regards Shouvik.
Links
http://developer.android.com/reference/android/app/admin/DevicePolicyManager.html#wipeData%28int%
also for formatting the SD card I came across a permission that you can request, I guess you follow that you end up at the method.
http://developer.android.com/reference/android/Manifest.permission.html#MOUNT_FORMAT_FILESYSTEMS

Which Windows SVN server should I use? [closed]

Closed. This question is opinion-based. It is not currently accepting answers.
Want to improve this question? Update the question so it can be answered with facts and citations by editing this post.
Closed 8 years ago.
Improve this question
On the SVN Windows binaries download page, there are a few to choose from:
http://subversion.tigris.org/getting.html#windows
Are there pros and cons to the different versions provided by the different organizations?
Is there anything I should look out for?
Mainly, I just want something free that I will be running off my Vista laptop. Then I will probably do backups of the SVN files from time to time to an external hard drive.
We chose VisualSVN bec it makes it easy to use windows authentication instead of having a separate SVN user.
Other benefits is an easy to use GUI for permission management and for managing SVN hooks.
The one thing I'm not a real fan of is the web GUI. As far as I know you cannot view web based diffs, so if that makes a difference....
My friends who run a Windows shop speak highly of VisualSVN
I've just configured win32svn server according to this article by Jeff Atwood.
In contrast to VisualSVN win32svn is not so tightly integrated to Windows, orientated on terminal usage and open sourced under Apache License.
All of these solutions setup the standard Apache HTTPD server with Subversion integration. They do no real magic.
UberSVN and VisualSVN provide a pretty front end interface, but behind the scenes, it's just standard Apache setup. If you are not a CM, and don't want that to be your job, that's not a bad alternative. However, do not ever try to tweak the configuration behind their backs. They will either revert the changes, or really mess things up.
However, I use Apache httpd in order to access my Windows Active Directory. I setup my users, so their Windows account and password are their Subversion account and password. I setup a Active Directory Security Group or a Active Directory Exchange Group as my authorization database. If a user is a member of this group, they have access to the repository via their Windows login. If not, they don't have access. Clean and simple. I am no longer in the user authorization business which gives me more time to play Candy Crush ..I mean.. other CM work.
Otherwise, I might as well just use svnserve: It's faster than Apache httpd, much easier to setup, and more stable too.
If you're not going to use Active Directory as your authorization backend, you are technical, and don't mind getting your hands a bit dirty, I would use either play svnserve (and set it up as a Windows Service. No need for any of these packages.
If you are going to use Active Directory as your authorization backend (and why not?), I would use CollabNet Subversion Edge to help setup Apache httpd and Subversion and do all of my configuration manually. Setting up Active Directory via LDAP via Apache httpd isn't really that difficult, and once done, you probably never have to touch again. The documentation on integrating Apache httpd/Subversion/LDAP/ActiveDirectory can easily be found.
I suggest you look at the on line Subversion Documentation and go through it. If thinking about using the svn command line client makes you woozy, then get VisualSVN or UberSVN and let them take care of things for you. If you don't mind going all 1990 with your computer, then forget about the pretty front ends, and use CollabNet Edge.
One more thing, I am not a fan of ViewVC that comes with CollabNet Edge. It has to use file:// protocol and must run on the same server as your Subversion server software. Instead, I prefer Sventon. It can run on a separate server, and you can use the same credentials as your standard Subversion credentials. Plus, I like the interface a bit better.
Putting in a vote for CollabNet Subversion Edge, it's dead simple to set up and administer via a web frontend. I'm comfortable editing config files if I must, especially coming from a Linux environment, but it's nice not to be required to do so - CollabNet makes that easy.
We use an Apache SSPI module with the Collab.Net subversion server.
Has worked perfectly for us.
Try UberSVN http://www.wandisco.com/ubersvn/download#windows
The only downside is that is requires lot of server memory. Best free SVN server I ever tried. VisualSVN free version is OK as well.

Resources