directory browsing

[reprint]

Ok, this may be a very stupid question but should a user be able to browse directories on my webserver? Should i make sure that each directory has a blank index file or something? I would have thought directory browsing would cause a security issue and would be turned off by default.

thanks

[appi2]

Your web host should have this set, but sounds as if they don't.

You can place whats known as a .htaccess (you may already have one) in your root folder with the following directive

IndexIgnore .htaccess */.?*

A more "general example" is
IndexIgnore .htaccess */.?* *~ *# */HEADER* */README* */_vti*

See
[httpd.apache.org...]
and search WebmasterWorld for IndexIgnore to learn more or ask your host.

Please don't jump and hack away at your .htaccess. Be careful!

And yes a quick trick is to place an index.html in a directory.