Apache HTTPD: How To Turn Off Index Listing in Directory & Sub-Directories; Protect WordPress wp-content
By Angsuman Chakraborty, Gaea News NetworkSunday, April 13, 2008
In Apache HTTPD server normally when you have no index or default page in a directory, a visitor may be served with a full list of files in that the directory. This could pose a serious security risk. It also exposes your files to the world at large, allowing them to be indexed by search engines and at the least pose privacy risk. There are well known Google hacks which exploit this feature. To stop default directory listing, add this to the htaccess file.
Options -Indexes
This turns off index listing in the directory and all sub-directories under it.
Note: In many web servers, directory listing may be turned off by default.
One of the vulnerable folder in wordpress is wp-content. If you have a WordPress blog, check there to ensure that its content are not listed.
|
June 18, 2010: 11:22 pm
We provide exclusive access to top grade independent flim projects and producers. |
|
June 18, 2010: 11:20 pm
We provide exclusive access to top grade independent flim projects and producers. |
|
May 18, 2010: 10:28 am
Thanks for this great collection of tools to use.researched material on forthcoming projects that allows them the opportunity to invest in the British film industry directly through each production company at a level suitable for themselves. |
|
May 18, 2010: 10:25 am
Thanks for this great resource. investors ,who work together to help produce feature films and West End musicals. We source, research and provide information to help match capital to impressive and dynamic film and theatre projects that attract industry renowned artists. |
Hasan