Remove Default Usernames/Passwords Included With XAMPP
By default, XAMPP has passwords for some of its included features, such as the FTP server, WebDav server, and some of the web accessible folders. These default passwords are well known and are documented in the c:\xampp\readme_en.txt file. If you don’t change these default passwords, it is easy for anyone with this knowledge to access your server.
The following links show how to change some of the default passwords:
Articles will be written in the future on how to remove the other default passwords in XMAPP.
The next step for this tutorial is to encrypt the transmission of passwords.