How do i protect files in directory from being listed and viewed

[luckysanj]

I am developing the free e-book sites.so i I want to know how to prevent the subfolders from websites.

Means, when we open the home page like www.best4knowledge.com then it first open index page then it's ok but users may be guess that there will be any folder & open like that www.best4knowledge.com/front/ . & it shows all the files but it is not secure for me to show all files.

So plz guide me how can i prevent to that files from un authentic person.

Thank you.

[Markus]

What server are you using? IIS, Apache?

[luckysanj]

Apache Server Because i am programming on PHP language.

[Niheel]

one way to do this without setting up secure password is to using an apache .htaccess file

Add the following in a file called .htaccess and upload it to the folder called "front"

<Directory ~ "\.front">
Order allow,deny
Deny from all
</Directory>
 

The other way to do this is setup a username and then password protect the folder. You'll find an easy to follow howto with complete directions and tools at this url:
http://www.ilisys.com.au/support/lin...sword-protect/

[luckysanj]

Ok with this method the folder are hidden from browser. But

he link files from subfolder doesn't work. when the index page call the pages from subfolder it can't access.

Then How can i solve ?

[Niheel]

If you want to stop allowing your users to view the directory's files you can do one of two things:

1) create a blank index.html file and upload it to /front/

or

2) you might try create an .htaccess file with the following code and upload it to your /front folder

<Directory ~ "\.front"> 
Options -Indexes 
</Directory>
 

[Markus]

@luckysanj
You can program 'on PHP' using IIS, you know. :)

Going to move this over to Apache.

[luckysanj]

It doesn't work. It is like same problem. it display all the subfolder pages.

[numberwhun]

@luckysanj
First, which option did you try? Remember, if you add to your httpd.conf file, you have to restart your apache server for the changes to take effect.

Regards,

Jeff

[rkrstar]

You can keep an index file(index.html or which ever file you gave in DirectoryIndex) in your "front" directory or which ever directory you want to hide listing of files. It will prevent listing of files and directories.