Databases Reference
In-Depth Information
XAMPP: Normally that's not recommended. Do you want me to turn it off? [yes]
y
XAMPP: Turned off.
XAMPP: Stopping MySQL...
XAMPP: Starting MySQL...
XAMPP: The MySQL/phpMyAdmin user pma has no password set!!!
XAMPP: Do you want to set a password? [yes]
y
XAMPP: Password:
XAMPP: Password (again):
XAMPP: Setting new MySQL pma password.
XAMPP: Setting phpMyAdmin's pma password to the new one.
XAMPP: MySQL has no root password set!!!
XAMPP: Do you want to set a password? [yes]
y
XAMPP: Write the password somewhere down to make sure you won't forget it!!!
XAMPP: Password:
XAMPP: Password (again):
XAMPP: Setting new MySQL root password.
XAMPP: Change phpMyAdmin's authentication method.
XAMPP: The FTP password is still set to 'lampp'.
XAMPP: Do you want to change the password? [yes]
y
XAMPP: Password:
XAMPP: Password (again):
XAMPP: Reload ProFTPD...
XAMPP: Done.
This will allow you to set a password for the MySQL server and also to configure the
server for improved security.
The XAMPP installation may have PHP configured with the
register_globals
setting
turned on. You should disable this old, insecure feature. Open the file
/opt/lampp/etc/
php.ini
and look for the line
register_globals = On
. Change the value
On
to
Off
, save
the file, and quit the editor. The new setting will be in effect after you restart your
Apache server.
You can stop your XAMPP servers by typing:
#
/opt/lampp/lampp stop
Stopping XAMPP for Linux 1.5.3a...
XAMPP: Stopping Apache with SSL...
XAMPP: Stopping MySQL...
XAMPP: Stopping ProFTPD...
XAMPP stopped.
The MySQL data directory is
/opt/lampp/var/mysql
; the files are owned by the user
nobody
, and in the
root
group. Given the nature of the XAMPP installation as a devel-
opment platform, we won't go into detailed modification of permissions.
Configuring a Newly Installed Server
Once you've installed the server, there are some steps you should take to initialize the
database tables and configure the server for good security. One of the first things to do
is to set a password for the database
root
account; this is not the same as the system
