• Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

How to disallow directory browsing on web server

 
Mike London
Ranch Hand
Posts: 1190
4
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
How do you keep someone from typing the URL to a directory in a browser and then having full access to all the files in it?
Often when I do this by accident, I get the message: "Access denied, you do not have permissions to view this folder" (or words to that effect).
How do I set this up?
Is this is a web server permissions issue or does it have to be handled some other way?
Thanks in advance.
-- Mike
 
Mark Bensing
Ranch Hand
Posts: 40
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
How you disable directory browsing depends on the server that you are using. I can tell you that for Tomcat 4.1 you want to go to the web.xml file in $CATALINA_HOME/conf. In there you will an entry for the default servlet:

Just change the value of the listings init-param to false.
I hope this helps,
Mark
 
Mike London
Ranch Hand
Posts: 1190
4
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
With my web hosting company I can only have one "web app".
Is there a solution for all the other apps I have hosted as well?
Thanks in advance for your reply.
-- Mike
 
It is sorta covered in the JavaRanch Style Guide.
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic