Anyway protecting your site from external site scandir

Question

Just came across to a website that lists all hidden files. I utilized Facebooks directory called: \"hashtag/\" and the results showed a whole bunch of files from http://www.face

Answer 1

The main option is Indexes you can turn them off in your .htaccess with

Options -Indexes

The second option is blocking Deny

Order Deny,Allow
Deny from All

Say you have a folder called inc that holds some files that you don't want accessible via a url but you want your other PHP scripts to be able to include them you toss this rule in an .htaccess file in your inc folder.

Here is a link to a great resource on .htaccess rules https://github.com/phanan/htaccess