Before I moved to Linux I used Uniform Server in production. XAMPP is fine as a dev environment but it is NOT secure. If you want something to put into a production environment Uniform Server is the way to go. It is locked down out of the box.

It has one of the better front ends for *AMP and most probably the best for Windows environment. It is one of the best ways for IIS people to make the move to Apache. The docs are great and it does not make a mess of httpd.conf or PHP.ini like other Apache front ends do.