Menu
I do not want to use .htaccess. How should I change my Directory attributes?
<VirtualHost *:80> ServerName abc.com DocumentRoot /usr/share/uploads <Directory " /usr/share/uploads"> Order allow,deny Allow from all </Directory> </VirtualHost> 
339
Another important security precaution is to disallow listing of files in directories. This can be set in the IIS (and should be already set as default configuration). It is recommended to disable directory listing for the whole website, although you can also disable this feature only for individual directories.
You can prevent directory listing for Apache by disabling mod_autoindex, setting appropriate options in the Apache configuration file, or by using . htaccess file.
If you are using Debian/Ubuntu, just go to terminal and type
sudo a2dismod autoindex sudo service apache2 restart If you are using Centos/Fedora, just do:
mv /etc/httpd/conf.d/autoindex.conf /etc/httpd/conf.d/autoindex.bkp /etc/init.d/httpd restart And similarly in other OS or distros...
This should disable the apache module that makes those fancy (normally useless and a security problem) directory listings. Also, as a bonus, you earn a bit of performance :-)
168
I really couldnt find a direct answer on internet ; even on apache documentation. Finally, could find the solution through few iterations; we need to use Options and the value should NOT contain Indexes.
<Directory "/usr/share/uploads"> Options Includes FollowSymLinks MultiViews AllowOverride None Order allow,deny Allow from all </Directory> If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With