RE: Wampserver addons & applications

Otomatic — Tue, 15 Sep 2026 08:10:21 GMT

Hi,

- Adminer 6.1.0
https://wampserver.aviatechno.net/files/apps/wampserver3_x64_adminer6.1.0.exe

Topic Replies: 146

RE: OpenSSL soon End of life, plan to use 3.5 LTS

James Blond — Mon, 14 Sep 2026 19:00:24 GMT

That is the right choice. Security before new features. Also httpd uses only a very small amount of the OpenSSL features. I don't see any benefit in using the EOL version.

Topic Replies: 1

OpenSSL soon End of life, plan to use 3.5 LTS

Steffen — Mon, 14 Sep 2026 14:40:08 GMT

OpenSSL 3.6 is 1 November End of Live. version 3.6 is Non- LTS.

Version 4 is not yet supported full by HTTPD 2.4.68.

Plan is now to use Version 3.5, it is Long-Term Support (LTS), it is supported till 8 April 2030 with the latest bug/security patches.

LTS versions are highly stable releases designed for enterprise use, guaranteeing a 5-year lifecycle.
Each LTS release receives full bug and security fixes for the first four years, followed by security-only patches in its final year.

Please comment.

Topic Replies: 1

RE: Sometimes Down this week 8 - 11 September

Stray78 — Wed, 09 Sep 2026 20:41:25 GMT

Thanks for everything you guys do!

Topic Replies: 2

RE: Sometimes Down this week 8 - 11 September

admin — Wed, 09 Sep 2026 12:57:25 GMT

Update finished.

Topic Replies: 2

RE: Wampserver addons & applications

Otomatic — Tue, 08 Sep 2026 08:52:15 GMT

Hi,

- Adminer 6.0.2
https://wampserver.aviatechno.net/files/apps/wampserver3_x64_adminer6.0.2.exe

Topic Replies: 146

Sometimes Down this week 8 - 11 September

admin — Mon, 07 Sep 2026 15:35:03 GMT

We are upgrading our netwerk.

Topic Replies: 2

RE: Apache httpd 2.4.68 GA Available :: Update

tangent — Wed, 02 Sep 2026 14:51:39 GMT

This repeated alert from WithSecure annoys me, and I rather agree this is a false positive.

Apache builds are created using the latest release of MSVC (VS18), and since this warning appears to have kicked off within the last two builds, to me it suggests it's something to do with MSVC compiler changes, particularly code optimisations. There is mention of such 'improvements' earlier this year here:- https://devblogs.microsoft.com/cppblog/c-performance-improvements-in-msvc-build-tools-v14-51

I considered uploading a copy of the latest HTTPD binary to WithSecure to go through their Sample Validation service, requesting they consider whitelisting this signature. Unfortunately, it seems WithSecure retired its old public "Submit a Sample" system at the end of December 2025, and their replacement is a Sample Validation service in WithSecure Elements Security Center, which requires an authenticated WithSecure account.

So instead I uploaded the binary to the TotalVirus site for consideration, since it claims to use WithSecure amongst various vendor scanners:- https://www.virustotal.com/gui/home/upload

For me it currently shows no issues with the httpd.exe binary out of the httpd-2.4.68-260827-Win64-VS18.zip archive, based on some 70 AV scanners including WithSecure. The result ....

Continue this post on Apache Lounge

Topic Replies: 11

RE: Wampserver addons & applications

Otomatic — Wed, 02 Sep 2026 07:36:44 GMT

Hi,

- Tray Menu Manager 3.2.7.9
https://wampserver.aviatechno.net/files/aetray/traymenumanager3.2.7.9.exe

Topic Replies: 146

RE: HOWTO: Building Apache and dependencies using CMake

tangent — Fri, 28 Aug 2026 15:01:01 GMT

Release 5.1 includes the following build dependency updates:

APR-UTIL (1.6.5)
CURL (8.21.0)
EXPAT (2.8.3)
JANSSON (2.15.1)
LUA (5.5.1)
NGHTTP2 (1.70.0)
OPENSSL (3.6.4)

The OPENSSL build configuration has been updated to link with z.dll rather than zlib1.dll.

Two further support packages have been added to the build; namely NGHTTP3 and NGTCP2. These are aimed at providing a QUIC support framework for possible future Apache HTTP3 module development; something which is really needed. The following post provides a detailed insight to the issues surrounding HTTP3 and the current 2.4.x releases - https://codeit.guru/apache-http3-pr-699-mpm-quic-backport-2-4-68.

Nonetheless, the presence of these libraries means CURL can be built with HTTP3 support, by setting script variable CURL_USE_NGTCP2=ON

Code:

C:>apache24\bin\curl -V
curl 8.21.0 (Windows) libcurl/8.21.0 OpenSSL/3.6.4 zlib/1.3.2 brotli/1.2.0 zstd/1.5.7 nghttp2/1.70.0 ngtcp2/1.25.0 nghttp3/1.18.0 WinLDAP
Release-Date: 2026-06-24
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns ldap ldaps mqtt mqtts pop3 pop3s rtsp smb smbs smtp smtps telnet tftp ....

Continue this post on Apache Lounge

Topic Replies: 112

RE: Wampserver addons & applications

Otomatic — Thu, 27 Aug 2026 13:04:11 GMT

Hi,

- InnoSetup installer created from the Apache Lounge binary

- Apache 2.4.68.2
https://wampserver.aviatechno.net/files/apache/wampserver3_x64_addon_apache2.4.68.2.exe

Topic Replies: 146

RE: Apache httpd 2.4.68 GA Available :: Update

admin — Thu, 27 Aug 2026 10:55:54 GMT

False positive. Defender etc. no issue.

Topic Replies: 11

RE: Apache httpd 2.4.68 GA Available :: Update

BeWog — Thu, 27 Aug 2026 10:31:58 GMT

Hello,

For your information, my antivirus (WithSecure) also flagged the latest version of C:\Apache24\bin\httpd.exe as suspicious.

Here is the translated message from WithSecure:

Quote:

27/08/2026 12:12
Suspicious behavior prevented

Path: C:\Apache24\bin
File: httpd.exe
Application hash: e77b058389c9ed22ae9ddda16719780ac0c232d2bb1c4f417b8763fe241d96fe
Reason: Suspicious:W32/Malware!DeepGuard.a

Regards.

Topic Replies: 11

RE: Apache httpd 2.4.68 GA Available :: Update

Steffen — Thu, 27 Aug 2026 07:19:04 GMT

Updated httpd 2.4.68 dependencies (a lot, including OpenSSL).

Added nghttp3 and ngtcp2 libraries for Curl (added http3 support in Curl).

see https://www.apachelounge.com/Changelog-2.4.html

Topic Replies: 11

RE: Wampserver addons & applications

Otomatic — Wed, 26 Aug 2026 07:55:24 GMT

Hi,

- PHP 8.4.25
https://wampserver.aviatechno.net/files/php/wampserver3_x64_addon_php8.4.25.exe
- PHP 8.5.10
https://wampserver.aviatechno.net/files/php/wampserver3_x64_addon_php8.5.10.exe

Topic Replies: 146

RE: Wampserver addons & applications

Otomatic — Sun, 23 Aug 2026 08:04:32 GMT

Hi,

- MariaDB 10.6.28 LTS
https://wampserver.aviatechno.net/files/mariadb/wampserver3_x64_addon_mariadb10.6.28.exe
- MariaDB 10.11.19 LTS
https://wampserver.aviatechno.net/files/mariadb/wampserver3_x64_addon_mariadb10.11.19.exe
- MariaDB 11.4.13 LTS
https://wampserver.aviatechno.net/files/mariadb/wampserver3_x64_addon_mariadb11.4.13.exe
- MariaDB 11.8.9
https://wampserver.aviatechno.net/files/mariadb/wampserver3_x64_addon_mariadb11.8.9.exe
- MariaDB 12.3.3
https://wampserver.aviatechno.net/files/mariadb/wampserver3_x64_addon_mariadb12.3.3.exe

Topic Replies: 146

RE: Wampserver addons & applications

Otomatic — Sat, 15 Aug 2026 09:21:21 GMT

Hi,

- Adminer 6.0.1
https://wampserver.aviatechno.net/files/apps/wampserver3_x64_adminer6.0.1.exe

Topic Replies: 146

RE: 'Primary script unknown' into Apache logs

James Blond — Thu, 13 Aug 2026 10:40:02 GMT

First thought is to surround that with the "does the file exist" question.

Code:

<Location /php-status-www>
<If "-f %{REQUEST_FILENAME}">
SetHandler proxy:unix:/srv/run/php/www.sock|fcgi://localhost
</If>
</Location>

The other thought is: does it make sense to look for the requesting host and limit that. Like REMOTE_ADDR or REMOTE_HOST. Or require ip 10.1.0.0/16 or Require host example.org

See https://httpd.apache.org/docs/2.4/mod/mod_authz_host.html#reqhost and https://httpd.apache.org/docs/2.4/expr.html

Topic Replies: 7

RE: 'Primary script unknown' into Apache logs

Otomatic — Tue, 11 Aug 2026 08:03:35 GMT

Hi,

I�m not entirely sure how things are configured with my hosting provider.
What I do know is that the mod_proxy_fcgi.c module is loaded and that the Apache configuration (2.4.43) contains directives such as:

Code:

<Location /php-status-www>
SetHandler proxy:unix:/srv/run/php/www.sock|fcgi://localhost
</Location>

Sorry, I can't say any more than that.

Topic Replies: 7

RE: 'Primary script unknown' into Apache logs

James Blond — Tue, 11 Aug 2026 07:09:09 GMT

I wonder. Where do you use proxy fcgi?

Topic Replies: 7

RE: HTTP/3 support availability

admin — Mon, 10 Aug 2026 15:05:18 GMT

Posted at the developer list :

https://lists.apache.org/thread/xh27loq08vbkm0vkr44mz185rtwc9qg6

Topic Replies: 14

RE: Wampserver addons & applications

Otomatic — Sat, 08 Aug 2026 09:11:38 GMT

Hi,

- Adminer 6.0.0
https://wampserver.aviatechno.net/files/apps/wampserver3_x64_adminer6.0.0.exe

Topic Replies: 146

RE: 'Primary script unknown' into Apache logs

Otomatic — Fri, 07 Aug 2026 13:13:37 GMT

Hi,

The Handler is :

Code:

AddHandler application/x-httpd-php .php

And, yes the saved file contains the PHP code.

Topic Replies: 7

RE: 'Primary script unknown' into Apache logs

James Blond — Fri, 07 Aug 2026 10:44:48 GMT

Pardon me for that. How was the Handler set before? Because now the file content is sent as a download. I'm pretty sure it contains the PHP code.

Topic Replies: 7

RE: 'Primary script unknown' into Apache logs

Otomatic — Fri, 07 Aug 2026 07:41:34 GMT

Thank you.

However, if I add this to the .htaccess file on my local site, when I request access to the website, a window appears with the title:

Enter the file name for saving

And a file name like: IRbiKAYR

Topic Replies: 7

RE: 'Primary script unknown' into Apache logs

James Blond — Fri, 07 Aug 2026 06:10:32 GMT

It is a better solution to get a real 404 error. To do that you better check if that file exists.

Code:

<Files ~ "\.php$">
<If "-f %{REQUEST_FILENAME}">
SetHandler "proxy:fcgi://127.0.0.1:9000"
</If>
</Files>

Topic Replies: 7

'Primary script unknown' into Apache logs

Otomatic — Thu, 06 Aug 2026 15:00:11 GMT

Hi,

The Apache log files are (almost) entirely filled with lines like the one below, and they fill up very quickly.

Code:

[Thu Aug 06 14:32:56.147608 2026] [proxy_fcgi:error] [pid 7240:tid 140597490640640] [client 20.52.171.102:33522] AH01071: Got error 'Primary script unknown'
[Thu Aug 06 14:32:56.213311 2026] [proxy_fcgi:error] [pid 7240:tid 140597616531200] [client 20.52.171.102:33522] AH01071: Got error 'Primary script unknown'
[Thu Aug 06 14:32:56.253052 2026] [proxy_fcgi:error] [pid 7240:tid 140597952239360] [client 20.52.171.102:33522] AH01071: Got error 'Primary script unknown'
[Thu Aug 06 14:32:56.285877 2026] [proxy_fcgi:error] [pid 7240:tid 140597868312320] [client 20.52.171.102:33522] AH01071: Got error 'Primary script unknown'
[Thu Aug 06 14:32:56.320068 2026] [proxy_fcgi:error] [pid 7311:tid 140597767599872] [client 20.52.171.102:32134] AH01071: Got error 'Primary script unknown'

My web host told me that this was caused by a bot and that it would be a good idea to add the following lines to an .htaccess ....

Continue this post on Apache Lounge

Topic Replies: 7

RE: Wampserver addons & applications

Otomatic — Wed, 29 Jul 2026 13:08:08 GMT

Hi,

- PHP 8.2.33
https://wampserver.aviatechno.net/files/php/wampserver3_x64_addon_php8.2.33.exe
- PHP 8.3.33
https://wampserver.aviatechno.net/files/php/wampserver3_x64_addon_php8.3.33.exe
- PHP 8.4.24
https://wampserver.aviatechno.net/files/php/wampserver3_x64_addon_php8.4.24.exe
- PHP 8.5.9
https://wampserver.aviatechno.net/files/php/wampserver3_x64_addon_php8.5.9.exe
- MySQL 8.0.46
https://wampserver.aviatechno.net/files/mysql/wampserver3_x64_addon_mysql8.0.46.exe
- MySQL 8.4.11
https://wampserver.aviatechno.net/files/mysql/wampserver3_x64_addon_mysql8.4.11.exe
- MySQL 9.7.2
....

Continue this post on Apache Lounge

Topic Replies: 146

HOWTO: Securing Windows filesystem for Apache

tangent — Tue, 21 Jul 2026 13:39:27 GMT

Windows security is a constant cause for concern, with new issues and vulnerabilities being unearthed on a regular basis. However, one potential problem area that has been around for a long time is platform filesystem security (NTFS), and of interest to Apache Lounge users, how that relates to Apache installations.

This brief HowTo document discusses options for restricting access to the Apache installation, to circumvent unwanted access to the configuration and content.

By default, Apache Lounge builds are created and configured with a target directory of C:\Apache24, and it's left to the individual to create that directory and extract the binary distribution from an appropriate download archive.

One issue here is that by default, Windows grants modify access to Authenticated Users, to directories created under the C:\ root, so depending on your server platform, its configuration, and who can log on to your server, you may want to restrict access rights to Apache files, and limit them to local Administrators.

When you create a new C:\Apache24 directory, you can check the Discretionary Access Control Lists (DACLs) assigned to that object (in a command window) using the icacls command:

Code:

C:\>icacls C:\Apache24
C:\Apache24 BUILTIN\Administrators:(I)(OI)(CI)(F)
....

Continue this post on Apache Lounge

Topic Replies: 0

RE: A Fast, Reliable and Proven Setup :: Apache PHP MySQL

James Blond — Tue, 21 Jul 2026 12:58:33 GMT

With the new OpenSSL version, you can have post-quantum algorithms. I've added X25519MLKEM768 to the tutorial. And added SSLOpenSSLConfCmd SignatureAlgorithms

Topic Replies: 12