On 10/13/05, paul johnson <p_jay@xxxxxxxxxxxxx> wrote: > i have set up a simple guestbook php script. the index.php contains the > admin password and this file is quite freely available if someone just went > to the guestbook/ directory and downloaded the file.. > > is it possible to make it so people cant view directories/index's on my > site. ive spent a good while looking for information relating to this but i > cant find any. See: http://httpd.apache.org/docs/1.3/misc/FAQ.html#indexes But I think you have a deeper problem. Why is guestbook.php downloadable? It should be processed by php so that the source code should not be available for download. Check you php config. Joshua. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx