Allegedly, on or about 13 June 2013, Rafnews sent:
when i installed apache 2.4 it automatically create a group and an user apache.
So it doesn't run as root...
All files/folder that are under /publi_html should have apache as user/group permissions.
No, serveable files should not be owned by apache, that would allow the outside world read/write access when they should only have read access. The normal way to serve files is to have them owned by the author, with world-readable file attributes.
So what is the default password for apache user account ?
There is none. It's not an account that can log-on. The server runs /as/ the apache user, so it has low privileges.