Forum GLPI-Project

geanfonsecaa

Member

Registered: 2023-07-13

Posts: 6

Server web not secure - GLPI + WINDOWS + XAMP

I installed GLPI 10 with Xampp (MySQL, Apache, PHP, phpMyAdmin) on my machine to test the tool and features before playing on the server.

Everything ok, except for the message referring to the web server files:

"Setting the web server root directory is not secure as it allows access to non-public files. See installation documentation for more details."

I can't solve it, please someone help

cconard96

Moderator

Registered: 2018-07-31

Posts: 2,806

Website

Re: Server web not secure - GLPI + WINDOWS + XAMP

See installation documentation for more details.
https://glpi-install.readthedocs.io/en/ … figuration

If you need more assistance, please let us know what you have tried and what issues you are having with getting the web server configuration set.

---

GLPI Collaborator and Plugin Developer.
My non-English comments are automated translations. Sorry for any confusion that causes.
Mes commentaires non anglais sont des traductions automatiques. Désolé pour toute confusion qui cause.
Mis comentarios que no están en inglés son traducciones automáticas. Perdón por cualquier confusión que cause.

vikthor

Member

From: Cancún Q.Roo México.

Registered: 2024-05-11

Posts: 7

Re: Server web not secure - GLPI + WINDOWS + XAMP

Hola. Buenas Tardes.

Hice lo que comentan, pero cuando reinicio los servicios en Xampp, me aparece:

" Se ha denegado el acceso a 127.0.0.1 No tienes autorización para ver esta página.
HTTP ERROR 403 "

Mi código en httpd-vhosts.conf:

<VirtualHost *:80>

    DocumentRoot "C:\xampp\htdocs\Glpi\public"
    ServerName glpi.localhost

   
    <Directory "C:\xampp\htdocs\Glpi\public">
   
     #   Options Indexes FollowSymLinks Includes ExecCGI
     #   AllowOverride All
         Require all granted
         RewriteEngine On
     #   Ensure authorization headers are passed to PHP.
     #   Some Apache configurations may filter them and break usage of API, CalDAV, ...
         RewriteCond %{HTTP:Authorization} ^(.+)$
         RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

     #   Redirect all requests to GLPI router, unless file exists.
         RewriteCond %{REQUEST_FILENAME} !-f
         RewriteRule ^(.*)$ index.php [QSA,L]
       
    </Directory>
   
   
</VirtualHost>

No se que me haga falta? Espero me puedan ayudar.  Gracias de Antemano.