Any Apache heads out there?

reptonite

Hi there

Time is of the essence here, hence the post. Can anyone tell me what is the most secure way of modifying your httpd.conf so that a website can still be accessed, but that the folders cannot be browsed using the browser?

thanks in advance.

dahamsta

To do it across the board on the server, comment out the mod_autoindex module at the top of the configuration.

#LoadModule autoindex_module modules/mod_autoindex.so

To do it for a particular VirtualHost when Indexing is the default, add -Indexes to an existing Options directive, or add one:

Options -Indexes

Beter yet, disable it for the default view, and only enable it when you specifically need it.

adam

reptonite

thanks Adam

#LoadModule autoindex_module modules/mod_autoindex.so

is already commented out in favour of

LoadModule autoindex_color_module modules/mod_autoindex_color.so

which if commented out means apache won't start.

Cheers

Mark

dahamsta

Never heard of it, but if it's a direct replacement simply follow the instructions for one of the other two suggestions.