TheTobers.net » Web Design http://thetobers.net Atlanta Tobers Sat, 05 Nov 2011 15:01:11 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Secure Open Directories http://thetobers.net/2009/03/secure-open-directories/ http://thetobers.net/2009/03/secure-open-directories/#comments Fri, 27 Mar 2009 14:00:45 +0000 rtober http://www.thetobers.net/?p=626

Continue reading »]]> By default, most ISP hosted Apache web server accounts do not prevent file indexing when a user navigates into a folder location missing a default index page. Why is this bad? For starters, it provides a quick and dirty method for determining your server/mod/plugin versions and install directory structure. Script Kiddie 101 stuff.

A quick and easy method to prevent casual file browsing is via a short root .htaccess mod:

# prevent directory browsing
Options -Indexes

Adding this option covers all the root sub folders automatically. Highly recommended for WordPress installs due to the shear volume of file directory information located in a typical install.

]]> http://thetobers.net/2009/03/secure-open-directories/feed/ 0