Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : how do I disable "directory browsing"

[kipasa]

directories that do not have an index file tend to show you the contents of that directory (simple or graphic wise). How do I disable this feature?

I think its through SSH but does any know how? Thanks!

[dbzgod]

Options -Indexes

Put that line into a .htaccess file in each directory you want to disable directory browsing for.

[kipasa]

but that is gonna kill me since i have more than 300 directories don't you think? I need an SSH solutions to turn it off completely.

Thanks anyways

[kipasa]

i tried search earlier and all it returned was two threads that had NOTHING to do with what i am asking.
any help pls?

[Eric Lim]

Add this into your httpd configuration file

<Directory /directory/to/you/web/root/>
Options -Indexes
</Directory>

It should do all the work.

[kipasa]

cyberservers... thanks! but where can i find that httpd conf file? can you give me a Linux path example? thanks again

[sprintserve]

Are you trying to disable it totally for your server? If so, look in your httpd.conf for this section starting with this line:

<Directory /home/*/public_html>

Chances are they are commented out. Uncomment them out till

</Directory>

In the line with Options

Add

-Indexes

Save and restart Apache.

[kipasa]

where can i find httpd.conf file?
its not under public_html......... sorry, newbie here

[sprintserve]

/usr/local/apache/conf/httpd.conf

[kipasa]

tanks tanks tanks!! life saver is what you are!

[cactus]

No need to go all the trouble to edit your httpd.conf

If you have WHM(root) go to:

Account Function:

>Skeleton Directory

root/cpanel3-skel
This directory is what will be used as a skelton for new accounts. For example if you place an index.html file in /root/cpanel3-skel/public_html, and then setup a new account, that account with have a copy of your index.html in their public_html directory.

Regards

[cactus]

Oh I forgot! If you are a reseller and setting new accounts, Using your WHM(reseller) then also go to and upload a default page to:

Account Function:

>Skeleton directory

/home/Reseller_Username/cpanel3-skel
This directory is what will be used as a skelton for new accounts. For example if you place an index.html file in /home/Reseller_Username/cpanel3-skel/public_html, and then setup a new account, that account with have a copy of your index.html in their public_html directory

In your index.html just put some text for example "UNDER CONSTRUCTION" and add maybe an image to the page, animation gif would look good.


Regards

[cactus]

An alternative method if you wish to turn off the directory listing for existing accounts without an index.html default page

Edit your /usr/local/apache/conf/access.conf

and remove the word "Indexes"

After editing it will look like this:

<Directory />
Options FollowSymLinks ExecCGI Includes
AllowOverride All
order allow,deny
allow from all
</Directory>


You must restart Apache for these changes to go into effect. You can restart Apache through your WHM(root) or at the command line.

/etc/rc.d/init.d/httpd stop

/etc/rc.d/init.d/httpd start


The result instead of the directory listing:

Forbidden
You don't have permission to access / on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

---------------------------------------------------------------------
Apache/1.3.28 Server at www.domainname.com Port 80



Regards

[kipasa]

cactus your method worked flawlessly... thank you!