How to stop Apache from listing the contents of my user directories

前端 未结 2 1598
北恋
北恋 2021-01-24 14:10

I recently ran some penetration testing software on my web site and was surprised for it to report that one of my directory listings was publicly accessible.

2条回答
  •  天涯浪人
    2021-01-24 15:12

    There is a command in Apache that will make it show indexes.

    Options +Indexes
    

    Remove this, restart. This will make that url show a 403 Forbidden.

提交回复
热议问题