how do i make "index view" not permissable to view?

soniared2002

Morning all,
Finally the web site i am working on is running, however one problem now is left..security.
I want the user not be able to see the indexes, but only the web pages..For example, my web mage is www.webpages.com/page1.html
i dont' want the user be able to go to www.webpages.com/ and see all the files under that directory.
I was trying to figure out the httpd.conf appace code, and restrict it using <Files .../Files> restirctions, however that wasn't solving my indexes problem.
Thanks alot,
sofia

The_Chancer

Not exactly a coding problem.... but which webserver are you using ?

soniared2002

windows xp..

The_Chancer

Not which OS.. but webserver - IIS / Apache etc ?

soniared2002

Oh, apache

The_Chancer

Have a look at this in google Stop directory listing Apache the top link should be very informative...

Either that or add
<Directory />
Options -Indexes FollowSymLinks
AllowOverride None
</Directory>

to the HTTPD.conf file....

soniared2002

Hi,
Thanx for your reply,
I have done both, and it doesn't work..any ideas why?
in my conf file i have put -Indexes,
and i have added a file .htaccess and in it 😮ptions -Indexes
Doesn't work, i could still see the indexes from the web.
(I did restart my apache server).
Any ideas why it isnt' working?
Thanx.

soniared2002

I should have putted
AllowOverride Indexes in httpd.conf
instead of the regular AllowOverride None,
Now the problem is solved.

However, there is another problem now:
at one of mine links : www.website.com/website/
it gives me a web page (not an index directory but a html web page, how did that happen?)
.....any reasons for that???
Thanx...

soniared2002

since my
<Directoryindex> was set to a page that the directory had...that is why it was showing it..
Apperently directoryindex works for all the sub directories as well..

Good day all.