Hi,

Currently I'm running WAMP on my local box for development. We have an available Windows-based server box in Dallas that we're looking to convert to run our corporate website. To make things easy, I was hoping I could setup WAMP and copy all my files over and let it service our live site. However, I can't seem to find much info on whether or not WAMP is a suitable environment for a live site -- or it is recommended for dev only? The box is fine... plenty of hardware and pipe to feed a site.

Thanks guys -- looking to do this today so quick response would be appreciated.

first time drupal-user and must say, <3.

Comments

timoratd’s picture

it based on how critical your site is, normally wamp is for testing and developing only.

H3rnand3z’s picture

The default WAMP config is not secure, it has been set up to be as open as possible, great for development but bad for production use. I think you will be ok as long as you secure Apache, SQLitemanager, MySQL, Phpmyadmin. Start by disabling anything that is not required in production.

vm’s picture

I wouldn't consider using WAMP. as already stated its more for development of a site not running a production server.

___________________________________________________________
The search tool on Drupal.org really does work.
This message has been brought to you by:
the letter X , the letter Z and the number 2.
Thanks for watching! : )
bestknight’s picture

For the more Knowledgeable: WAMP is only one of the many Apache-PHP-MySQL preconfigured solutions for web serving. Your advice of not using WAMP for a live site would extend to say PHPtriad, XAMPP etc? Is there a preconfigured solution (Apache-PHP-MySQL) you WOULD suggest for a live site?

vm’s picture

investigate ubuntu or centos

___________________________________________________________
The search tool on Drupal.org really does work.
This message has been brought to you by:
the letter X , the letter Z and the number 2.
Thanks for watching! : )
bestknight’s picture

what do you mean? those are Linux operating systems. Do they have Apache-PHP-MySQL preconfigured and ready to run? (as a WAMP package like XAMPP does?)

vm’s picture

:sigh:

quoted directly from the ubuntu server edition page.

Lower Total cost of ownership with automatic LAMP installation
In around 15 minutes, the time it takes to install Ubuntu Server Edition, you can have a LAMP (Linux, Apache, MySQL and PHP) server up and ready to go. This feature, exclusive to Ubuntu Server Edition, is available at the time of installation.

The LAMP option means you don't have to install and integrate each of the four separate LAMP components, a process which can take hours and requires someone who is skilled in the installation and configuration of the individual applications. Instead, you get increased security, reduced time-to-install, and reduced risk of misconfiguration, all of which results in a lower cost of ownership.

You can seek out other "LAMP" packages as well using google.

___________________________________________________________
The search tool on Drupal.org really does work.
This message has been brought to you by:
the letter X , the letter Z and the number 2.
Thanks for watching! : )
bestknight’s picture

Thank you for the feedback, VeryMisunderstood!

To make a point though, for the people not exactly at home with Linux (like myself), researching and trying out Linux for just publishing a website is not that easy. After all, if I had the knowledge (or the time to gain the knowledge) to run a Linux server, I would probably install Apache and PHP and MySQL and the many more components I am sure are needed one by one in order to gain the finer control and security instead of trying to take shortcuts via a WAMP package on a Windows box.

Leaving this last issue aside, I assume your suggestion is that Ubuntu Server Edition with automatic LAMP installation / configuration is appropriate for running a live site? No further packages need to be installed? No configuration via editing scripts etc is needed (and hence familiarity with running Linux via the command line in a non-graphical environment)?

Any comments on the other WAMP packages like ApacheTriad or XAMPP?

vm’s picture

If you insist on doing it in a windows based environment here are your choices:

http://en.wikipedia.org/wiki/Comparison_of_WAMPs

which has a comparison. While WAMP's can be used as a live solution, I just wouldn't suggest it, This is of course personal opinion and preference.

may want to use : http://www.boonex.org/2007/08/07/those-interested-in-hosting-raydolphino... as direction for using WAMP as a live server. I am sure there is documentation available for the other types of packages you have mentioned as well. Using each packages dedicated forum would proove fruitful as well, as to how to go from dev to prod.

___________________________________________________________
The search tool on Drupal.org really does work.
This message has been brought to you by:
the letter X , the letter Z and the number 2.
Thanks for watching! : )
sepeck’s picture

I use a Windows Apache MySQL solution just fine. If you are using a packaged solution I recommend ApacheTriad that two friends use as it's goal is production ready and secure.

Windows Servers are just fine as a hosting solution in many cases.

-Steven Peck
---------
Test site, always start with a test site.
Drupal Best Practices Guide -|- Black Mountain

-Steven Peck
---------
Test site, always start with a test site.
Drupal Best Practices Guide

tm’s picture

since you own the box in question and are comfortable with windows, maybe you can build your WAMP from scratch? figure if i can do it, it can't be THAT hard...

some of the issues that i have seen (so far) related to windows installations (other than it being windows);
- keep your paths short; no spaces allowed (easier to deal with paths). easier if tied to root.
- when installing php, put the path to \php and \php\ext in the global path so you don't have to do stupid things like copying dlls to windir. also makes upgrades a pain
- watch your php/mysql connectors; if you are using the current versions of mysql and php, you should be okay
- you have to build your own scripts to roll the apache/php logs; probably set an AT command (weak ms attempt at cron) to run it
- recommend hanging htdocs directly off root (short path).
- create a separate temp folder for drupal so you don't co-mingle files with system stuff

advantage of build your own; you build it, you know what and where everything is, is easier to upgrade piecemeal.
disadvantage of build your own; you build it, you maintain all the pieces and weave the whole mess together.

the most difficult thing will be locking down windows(!); strip it down and watch your permissions.

just an option, up to you.

airgle’s picture

from understanding of the above posts, WAMP config is not secure for the solution. Anyone knows how to deal with this issue. thank you

airgle

vm’s picture

IMO - to make a WAMP more secure you take out the W and add an L. : )

_____________________________________________________________________
Confusious says:
"Those who seek drupal answers should use drupal search!" : )

arzajac’s picture

If all things were equal, I would agree with you. In this case, the OP is already much more familiar with a windows solution. That counts for something.

Installing an Ubuntu LAMP server is quick and easy. (https://help.ubuntu.com/community/ApacheMySQLPHP) Putting it into a production environment will expose it to just about the same risks as a windows box and require the same sort of maintenance. I would feel much more comfortable maintaining the Ubuntu box, since that's what I know.

But, if you happen to think that the command-line is a burden rather than a luxury, then you will have the opposite opinion and probably have more success running WAMP.

vm’s picture

the comment of mine to which you are replying wasn't for the OP : )
Twas just an attempt at humor.

As far as I can tell the OP was answered with a WAMP solution, being Apache2Triad

_____________________________________________________________________
Confusious says:
"Those who seek drupal answers should use drupal search!" : )

H3rnand3z’s picture

There are so many resources on securing apache, mysql... two that I remember are http://dev.mysql.com/tech-resources/articles/securing_mysql_windows.html and http://www.apachelounge.com/forum/viewtopic.php?p=8696
According to their website you can use http://www.uniformserver.com/ in a production evironment. They have some tips on their site http://center.uniformserver.com/uniserver/security_check_list.html that you can use to secure your wamp or xampp install.