.htaccess不允许用户查看没有index.php的文件夹文件

Question

On my server, I've created a folder that doesn't have an index.php or index.html.

folder1/test.php
folder1/sample.php
folder1/hello.php

When I tried to visit that folder, it shows all the files in there.

That is my concern, it should not show the files in my folder because it is prone to hacking. It should display a page like a 403 Forbidden. I don't want to used an index.php just to redirect them to somewhere.

I heard that this involves .htaccess and this is a smart thing to do.

Kindly teach me how to do it.

Answer 1

In a .htaccess file in your document root...

Options -Indexes

See http://httpd.apache.org/docs/2.2/mod/core.html#options

Answer 2

That is called directory listing. You have to add a file named .htaccess in folder1 and add the following line to it

IndexIgnore *

to prevent directory listing to list any files.

Answer 3

What you are referring to is called 'Directory Browsing' and is a bad thing, usually. To prevent directory browsing, create or modify a .htaccess file in the root of your site.

If you create an .htaccess file, place this line inside of it:

 Options All -Indexes 

If modifying, look for

Options All +Indexes

and change it to Options All -Indexes

If you do not see an Indexes directive, add the line from option 1. That should do it.

Answer 4

Yes, you can put:

Options -Indexes

Or this:

IndexIngnore *

But for the .htaccess to be honored you have to put something simlar to:

AllowOverride All

In the httpd.conf or similar in your server configuration