viewing directories via Apache

Craig White plug-discuss@lists.PLUG.phoenix.az.us
Sat, 01 Sep 2001 21:41:26 -0700


George Toft wrote:
> 
> This page should guide you, depending on how much freedom you have
> on your web server:
> http://www.oreillynet.com/cs/weblog/view/wlg/97
> 
> What I do is remove index.html.  Since I already have Options indexes
> in httpd.conf, this results in a directory listing.
> 
> Keep in mind, this is generally frowned upon as it is indicative of
> a poorly managed server.
> 
----
and a potential security risk if you have .inc files which have things
like SQL/PHP passwords and the like within the Apache served tree.

From a security standpoint, options indexes isn't too cool.

Craig