As i know, Coral is very secure from default. I have a server live in the web, and my security steps are: Firewall: Only port 80 is open Apache: Im using the .htaccess - there is a LOT you can do for security and performance
Your problem is, that you have startet the "Start_as_programm" but apache any mysql runs already as service. So start the "Start_as_service", and you can stop apache & mysql.