Skip to content
World Wide Web Server edited this page Jul 4, 2012 · 5 revisions

this page contains few configurations which might help in developing and providing security to the applications:

Security - disable directory listing I heard that one of the "must do's" on setting a secure apache webserver environment is to disable directory browsing. I want to do this. Do I carefully remove "Indexes" in my htpd.conf file and or change "Indexes" to "-Indexes":

<Directory "/www/vhosts/localhost"> Options Indexes FollowSymLinks Order allow,deny Allow from all

to:

<Directory "/www/vhosts/localhost"> Options FollowSymLinks Order allow,deny Allow from all

or:

<Directory "/www/vhosts/localhost"> Options -Indexes FollowSymLinks Order allow,deny Allow from all

Then restart the server?

Clone this wiki locally