Directory Listing

[Mark2K]

Hi all,

I have set up Apache 2.0 on Windows 2000. I have created a few sub-directories which contain parts of the web site. The problem is, if we delete the filename from the URL it list the contence of the directory.

How do I go about disabling this? Also, is there any good websites that have info on Apache Security on Win32.

Many Thanks
Mark

 

[Wullie]

Hi mate,

Assuming that you have Options All specified, then the following will work.

Options All -Indexes

If you don't have all, just delete the Indexes line that appears in the directive you have.

Hope this helps Wullie

http://www.freshlookdesign.co.uk

http://www.freshlookdesign.com

http://www.mailtosanta.co.uk

The pessimist complains about the wind. The optimist expects it to change.
The leader adjusts the sails. - John Maxwell

 

[Mark2K]

Hi Wuliie,

Thanks for the response. My next question is where do I put that to. I'm new to Apache and don't have a clue what I am doing.

Mark

 

[Wullie]

Hi mate,

If you want to deny access on a directory basis, then you can add that to an .htaccess in the appropriate directory.

If you want to do it server-wide, then edit the httpd.conf

httpd.conf is in your apache/conf directory and contains all the Apache configuration, this is where you enable or disable anything.

Hope this helps Wullie

http://www.freshlookdesign.co.uk

http://www.freshlookdesign.com

http://www.mailtosanta.co.uk

The pessimist complains about the wind. The optimist expects it to change.
The leader adjusts the sails. - John Maxwell

 

[Mark2K]

Hi Wullie,

If I enter this (which I will give a try a little later), is the user still able to access the directory files. For example, if I have a address like below:

http://www.someurl.com/foo/bar.htm

I want them to beable to access the page bar.htm, but I don't want them to see the contence of the foo directory if they enter

http://www.someurl.com/foo

Many Thanks
Mark

 

[danielhozac]

Yes, [tt]Options All -Indexes[/tt] only denies access to the file listings, not the actual files. //Daniel