Forum Moderators: mack

Message Too Old, No Replies

How to hide my web directories/pages?

         

satujuragan

3:29 am on Aug 31, 2005 (gmt 0)



I found my pages (asp, txt, etc) listed from my browser. How do I find or protect it?

Eltiti

1:23 pm on Aug 31, 2005 (gmt 0)

10+ Year Member



I'm not sure I understand your question, could you please clarify? Are you talking about password protection, protecting the source code, or something else still?

ssanders82

2:32 pm on Aug 31, 2005 (gmt 0)

10+ Year Member



Are you talking the Directory Listing that automatically comes up when you open a folder with no defined index page? For example, if you have a folder called /images/ with no "index.htm" or index page, some configurations of your web server will automatically print out a list of all files in that directory. However, your asp code or any server-side code will not be visible to the public, as long as it's being parsed as ASP code and has an "asp" extension, not "inc" or something.

I think this is what you're talking about and there's a configuration option to turn it off, to look something like this page: [nonstop.compaq.com...]

Google for "disable directory listing" + Apache or "disable directory listing" + IIS, depending on your web server, and you should find instructions on how to turn it off.

The alternative would be to put an index.htm or index.asp file in that folder.