Re: [users@httpd] "hidden" directories

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 10 Mar 2005 06:03:32 -0700, Kevin Konowalec
<kevin.konowalec@xxxxxxxxxxx> wrote:
> I've noticed that in apache2 if you have a .htaccess file in a
> directory, if you then try to get the index of the parent directory (I
> have indexes on) the directory does not show up until you have
> authenticated.
> 
> For example, directory FOO which resides in /BAR has a .htaccess file
> in it.  So when I hit http://www.myserver.com/BAR I do not see the FOO
> directory.  If I go to http://www.myserver.com/BAR/FOO directly and
> authenticate, I can then see FOO when I get an index of BAR.
> 
> So the question is... can this behavior be turned off or is it a
> "feature" of apache2?  1.3.x didn't behave this way...

It is by design, for security reasons.  2.1 (the development version)
has an IndexOptions setting called "ShowForbidden" which will undo
this behavior:
http://httpd.apache.org/docs-2.1/mod/mod_autoindex.html#indexoptions

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux