subdirectory contents unexpectedly viewable

C

Cindy

Noticed something I don't understand. I have several webs on an Apache
server with FP extensions.

On one of the webs, I am able to remotely browse the contents of
subdirectories...like the /images directory...and see the directory
contents. On the other webs, I get the expected 404 error if I attempt to
do this.

I could not figure out what the difference is between the webs that makes
one vulnerable this way. I resolved it for now by putting an index.htm page
in each subdirectory to block access to directory contents, but what is the
key to getting this one web to make subdirectories unbrowsable for contents?

Thanks
 
T

Thomas A. Rowe

The images folder has never been a protected FP folder, only the _private
folder.

--

==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, Forums, WebCircle,
MS KB Quick Links, etc.
==============================================
 
C

Cindy

Thanks...I didn't understand why on some webs I get the 404 - not browsable
page, but on this one, I get the directory contents. -They seem to be setup
in the same way.

If I rename the subdirectories with an underscore... e.g. /documents to
/_documents will this fix the problem? -or will it create other problems?
 
T

Thomas A. Rowe

You need to contact you host to remove browse setting from the folder.

--

==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, Forums, WebCircle,
MS KB Quick Links, etc.
==============================================
 
J

Jack Brewster

If they won't do that, you could also put a default HTML file in there with
a redirect back to your home page.
 
Top