January 18, 2009 by Ivan Kristianto

[HowTo]Turn Off Directory Listing in Apache Web Server

Apache logo Today i found that my web server doesn’t make Directory Listing by default. And this can be a vulnerable for wordpress since wp-content directory can be exploit. So test your blog, if your web server doesn’t turn off the directory listing by default please follow this steps (only works for Apache web server):
1. Create or Edit existing .htaccess
2. Add this code there: Options -Indexes
3. Save and close .htaccess file
4. Test It!
That step will turn off the Directory Listing. Thank you for reading, and have a nice day…

What people search:

Article by Ivan Kristianto

Ivan Kristianto is a profesional web developer and blogger. Very interest with free and open source software. Follow my Twitter: @ivankrisdotcom or Facebook profile IvanKristiantoBlog or Email me at ivan@ivankristianto.com

Category: Web Server
Tags: apache, directory listing, how to, tips, web server

9 comments 0 people listening

Comment help
Get Livefyre

Sort: Newest | Oldest

Mick

Thank you for sharing this knowledge.

share flag

spam
offensive
disagree
off topic

Scarlett

Only just came across this whilst searching how to stop directory listing, so simple! Thanks so much =)

share flag

spam
offensive
disagree
off topic

Mike

What a simple solution. I was adding dummy index.html files to folders to prevent directory listing. This is MUCH easier. Thanks for the information! :)

share flag