Difference between revisions of "Htaccess: Prevent Directory Listing"

From The Uniform Server Wiki
Jump to navigation Jump to search
(New page: <span id="top"></span> <div style="padding:0;margin:0; border-bottom:3px inset #000000"> {| | MPG UniCenter || .htaccess: [[Htaccess: Introduction | Introduc...)
 
(Punctuation and grammatical changes; some clarification.)
Line 20: Line 20:
 
'''Prevent Folder (Directory) listing'''
 
'''Prevent Folder (Directory) listing'''
  
I find some times I use the term folder and at other times directory these are interchangeable and mean the same thing so forgive me when I do this.
+
Sometimes I use the term folder and at other times directory; these are interchangeable and mean the same thing, so forgive me when I do this.
  
If you have read the [Htaccess: Site error documents | site error documents page]] you will have created a folder named error. Type the following into your browser address bar : '''<nowiki>http://localhost/errors/</nowiki>''' you will be greeted with a full listing of its content (folders and files).
+
If you have read the [Htaccess: Site error documents | site error documents page]] you will have created a folder named '''error'''. Type the following into your browser address bar: '''<nowiki>http://localhost/errors/</nowiki>''' and you will be greeted with a full listing of its content (folders and files).
  
Try it on any folder that does not contain any of the following pages
+
Try it on any folder that does not contain one of the following pages:
 
:* index.html, index.shtml, index.html.var
 
:* index.html, index.shtml, index.html.var
 
:* index.htm, index.php3, index.php
 
:* index.htm, index.php3, index.php
 
:* index.pl, index.cgi
 
:* index.pl, index.cgi
and you will receive a listing of its contents as would anyone on the internet.
+
and you will receive a listing of its contents, as would anyone on the internet.
  
You may or may not find this desirable this page shows you how to prevent this listing.
+
You may not find this a desirable response. This page shows you how to prevent this listing.
  
'''''[[#top | Top]]'''''
 
 
== htaccess commands ==
 
== htaccess commands ==
 
There is only a single command to learn:
 
There is only a single command to learn:
Line 44: Line 43:
 
'''IndexIgnore <nowiki>*</nowiki>'''
 
'''IndexIgnore <nowiki>*</nowiki>'''
 
|
 
|
This prevents listing of all the files, the * is a wildcard that matches all files
+
This prevents listing of all the files; the * is a wildcard that matches all files
 
|-style="background:#f9f9f9"
 
|-style="background:#f9f9f9"
 
|
 
|
 
'''<nowiki>IndexIgnore&nbsp;*.gif&nbsp;*.jpg&nbsp;</nowiki>'''
 
'''<nowiki>IndexIgnore&nbsp;*.gif&nbsp;*.jpg&nbsp;</nowiki>'''
 
|
 
|
You can be selective and state the file types you do not want listed. Again the wildcard matches all files, in this example all gif and jpg image files are targeted and will not be displayed. While all others will be displayed.
+
You can be selective and state the file types you do not want listed. Again the wildcard matches all files; in this example all gif and jpg image files are targeted and will not be displayed, while all others will be displayed.
 
|}
 
|}
  
'''''[[#top | Top]]'''''
 
 
== Personalise index page listings ==
 
== Personalise index page listings ==
If you are not going to prevent folder listings consider personalising the page displayed.   
+
If you are not going to prevent folder listings, consider personalising the page displayed.   
  
You can personalise the index pages listed by adding a header and footer. This requires either one of two files placed in the folder with the htaccess file as follows:
+
You can personalise the index pages listed by adding a header and footer. This requires either one of two files placed in the folder with the .htaccess file as follows:
  
 
{|cellpadding="4" cellspacing="4"
 
{|cellpadding="4" cellspacing="4"
Line 68: Line 66:
 
This is just a text file containing something like this:
 
This is just a text file containing something like this:
  
'''<nowiki><h1>Power of htaccess</h1></nowiki>'''
+
'''<nowiki><h1>Power of .htaccess</h1></nowiki>'''
  
'''''Note'':''' You can insert any regular HTML tag. They are not complete HTML pages just snippets that are included.
+
'''''Note'':''' You can insert any regular HTML tag. These are not complete HTML pages, just snippets that are included.
 
|-style="background:#f9f9f9"
 
|-style="background:#f9f9f9"
 
|
 
|
 
'''README.html'''
 
'''README.html'''
 
|
 
|
Again this is a text file that uses any regular HTML tag for example:
+
Again this is a text file that uses any regular HTML tag, for example:
  
 
'''<nowiki><h1>More Power of htaccess</h1>'''</nowiki><br>
 
'''<nowiki><h1>More Power of htaccess</h1>'''</nowiki><br>
'''<nowiki><p>Why! The name README and not FOOTER I have no idea</p></nowiki>'''
+
'''<nowiki><p>Why the name README and not FOOTER, I have no idea</p></nowiki>'''
  
'''''Note'':''' You can insert any regular HTML tag. They are not complete HTML pages just snippets that are included.  
+
'''''Note'':''' You can insert any regular HTML tag. These are not complete HTML pages, just snippets that are included.  
 
|}
 
|}
  
+
 
'''''[[#top | Top]]'''''
 
 
----
 
----
  
{|
 
| [[Image:uc_small_logo.gif]] || [[User:Ric|Ric]]
 
|}
 
 
[[Category: UniCenter]]
 
 
[[Category: Support]]
 
[[Category: Support]]
[[Category: Troubleshooting ]]
 
 
[[Category: Application]]
 
[[Category: Application]]
 
[[Category: Development]]
 
[[Category: Development]]

Revision as of 13:53, 9 September 2011

MPG UniCenter

.htaccess: Introduction | Site error documents | Prevent Directory Listing | Redirect | Preventing hot linking |

.htaccess - Apache directory-level configuration file

Prevent Folder (Directory) listing

Sometimes I use the term folder and at other times directory; these are interchangeable and mean the same thing, so forgive me when I do this.

If you have read the [Htaccess: Site error documents | site error documents page]] you will have created a folder named error. Type the following into your browser address bar: http://localhost/errors/ and you will be greeted with a full listing of its content (folders and files).

Try it on any folder that does not contain one of the following pages:

  • index.html, index.shtml, index.html.var
  • index.htm, index.php3, index.php
  • index.pl, index.cgi

and you will receive a listing of its contents, as would anyone on the internet.

You may not find this a desirable response. This page shows you how to prevent this listing.

htaccess commands

There is only a single command to learn:

Command Comment

IndexIgnore *

This prevents listing of all the files; the * is a wildcard that matches all files

IndexIgnore *.gif *.jpg 

You can be selective and state the file types you do not want listed. Again the wildcard matches all files; in this example all gif and jpg image files are targeted and will not be displayed, while all others will be displayed.

Personalise index page listings

If you are not going to prevent folder listings, consider personalising the page displayed.

You can personalise the index pages listed by adding a header and footer. This requires either one of two files placed in the folder with the .htaccess file as follows:

File name Comment

HEADER.html

This is just a text file containing something like this:

<h1>Power of .htaccess</h1>

Note: You can insert any regular HTML tag. These are not complete HTML pages, just snippets that are included.

README.html

Again this is a text file that uses any regular HTML tag, for example:

<h1>More Power of htaccess</h1>'''
<p>Why the name README and not FOOTER, I have no idea</p>

Note: You can insert any regular HTML tag. These are not complete HTML pages, just snippets that are included.