Re: how to avoid content folder to by read

["Alain Roger" <raf.news@xxxxxxxxx>]

Hi Joshua,

i did the following thing but it does not work, even if i restarted apache services (under windows)
<Directory "D:/webserver/myweb/welcome/">
  Options -Indexes
  Deny from all
</Directory>

what's wrong ?

A.

On Jan 19, 2008 7:56 PM, Joshua Slive <joshua@xxxxxxxx> wrote:

On Jan 19, 2008 1:00 PM, Alain Roger <raf.news@xxxxxxxxx> wrote:
> Hi,
>
>  I would like to know how to avoid any user to read the content of my
> website folder using is browser?
> i mean the if i have the following thing :
>
> www.myweb.com/welcome/welcome.php
> www.myweb.com/welcome/info.php
>
> if user type www.myweb.com/welcome/, he will see 2 files and the parent
> directory tree :-(

See:
http://wiki.apache.org/httpd/DirectoryListings

You can fix this with
<Directory /full/path/to/welcome>
Options -Indexes
</Directory>
and possibly
DirectoryIndex welcome.php

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx

-- 
Alain
------------------------------------
Windows XP SP2
PostgreSQL 8.2.4 / MS SQL server 2005
Apache 2.2.4
PHP 5.2.4
C# 2005-2008