Hackers can copy your static web pages to build a fake site that is similar to yours and try to extort valuable information from your users. This means that users can easily gain access to all your static HTML files or web pages. It is a known secret that the default password for this is set to 'lampp'. ProFTPD is the default FTP (File Transfer Protocol) client used by XAMPP. Learn More: Become an Expert in Web Development and MySQL 3. Unfortunately, the MySQL daemon is easily accessible over the network which is very handy if you are developing websites on a local PC but is not ideal for production.Įven if you use a firewall to limit access, it may not completely secure your database from being accessed.

XAMPP uses MySQL or Maria DB as the database service. In case the database gets deleted or becomes inaccessible, your system will essentially be brought down. Most systems nowadays rely on databases.Anyone with access to your database can view and copy all your confidential user and company information including copying the entire database.Hackers can gain access to your entire database and modify anything at will because the root user has read, write, and execute permissions.The password for the database administrator on XAMPP is not set by default which can lead to many security problems. No Password for the Database AdministratorĪ password is crucial if you have a dynamic website with a database. However, XAMPP is not recommended for use on a production server because of the following security reasons. Why You Shouldn't Use XAMPP for Production

Use xampp