ChenXiu Posted July 18, 2021 Share Posted July 18, 2021 To disable directory listing, I've found two ways:1.) ssh command: a2dismod --force autoindex2.) by editing apache2.conf: <Directory /var/www/> Options -Indexes ........... Which is better? Should I do both? Thank you. Quote Link to comment https://forums.phpfreaks.com/topic/313401-disable-directory-listing-which-is-better/ Share on other sites More sharing options...
requinix Posted July 18, 2021 Share Posted July 18, 2021 Forget "better". Look at what the two options mean and decide which is more appropriate for you. The first option prevents the autoindex ability from even existing in the first place. Use it if you don't want to allow anything to do indexes at all, ever. The second option disables the index ability for every directory under /var/www. Use it if you don't want to enable indexes by default but might possibly want it on a case-by-case basis, eg. with a .htaccess and/or a more specific <Directory> directive somewhere. Quote Link to comment https://forums.phpfreaks.com/topic/313401-disable-directory-listing-which-is-better/#findComment-1588397 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.