Ask Question Forum:
Model Library:2025-02-08:A.I. model is online auto reply
C
O
M
P
U
T
E
R
2
8
Show
#
ASK
RECENT
←
- Underline
- Bold
- Italic
- Indent
- Step
- Bullet
- Quote
- Cut
- Copy
- Paste
- Table
- Spelling
- Find & Replace
- Undo
- Redo
- Link
- Attach
- Clear
- Code
Below area will not be traslated by Google,you can input code or other languages
Hint:If find spelling error, You need to correct it,1 by 1 or ignore it (code area won't be checked).
X-position of the mouse cursor
Y-position of the mouse cursor
Y-position of the mouse cursor
Testcursor
caretPos
Attachment:===
Asked by duncanb7
at 2024-12-08 09:24:50
ModifyPoint:500 Replies:12 POST_ID:828439USER_ID:11059
Topic:
PHP Scripting Language;Hypertext Markup Language (HTML);Linux Network Security
One day, when I test my www.mywebsite.com, and try to do something for index.html tutorial, for example,
I delete or rename any file about index such index.html and index.php and then go to web my webiste page
under no index.html or index.php condition.
I fould my site home page without any index file so IE will display my whole directory information as follows
with "Index of /" heading. So I suspect, other people is easy to read my directory information and read
anything in my directory
So my question is 2
Question-1, where is the directory infromation stored in Linux server directory and Could I chmod by 700 so that
others could not read dir information when no any index file is existed in my public_html directory ?
Question-2 where is the directory infromation stored in Linux server directy and Could I chmod by 700 so that
others could not read dir information when index file is already existed in my public_html directory ?
Please advise
Duncan
I delete or rename any file about index such index.html and index.php and then go to web my webiste page
under no index.html or index.php condition.
I fould my site home page without any index file so IE will display my whole directory information as follows
with "Index of /" heading. So I suspect, other people is easy to read my directory information and read
anything in my directory
So my question is 2
Question-1, where is the directory infromation stored in Linux server directory and Could I chmod by 700 so that
others could not read dir information when no any index file is existed in my public_html directory ?
Question-2 where is the directory infromation stored in Linux server directy and Could I chmod by 700 so that
others could not read dir information when index file is already existed in my public_html directory ?
Please advise
Duncan
www.mywebiste.com if no any index file exisited, it will show the site directoy information==============================================================Index of /work/product-1.doc/product-2.doc/..... 1:2:3:4:5:6:7:8:9:
Author: duncanb7 replied at 2024-12-08 21:47:22
Thanks and talk you later
Expert: Akenathon replied at 2024-12-08 13:58:42
Well... that depends on which webserver you happen to be using! Is it Tomcat, Apache, IIS? You may ask your sysadmin or ISP, then just google for it :-)
Author: duncanb7 replied at 2024-12-08 11:12:22
If possible, please kindly to send me where or location I can find the webserver specific documentation for
double confimr, Thanks
Duncan
double confimr, Thanks
Duncan
Author: duncanb7 replied at 2024-12-08 11:10:20
because you say ls -la
so it already explain my worry
THrough ls -la to send the
dir listing to IE
Thanks for your detail explain
Accepted Solution
Expert: Akenathon replied at 2024-12-08 11:05:38
500 points EXCELLENT
The dir listing is shown because your webserver is configured to provide it. How? Because the webserver executes the "ls" command and then returns the output as an HTML page, nicely formatted by (again) the webserver to have a heading of "INDEX OF /". EVERYTHING is made by the webserver, everything can only be changed by reconfiguring the webserver.
Whether you can be compromised or not depends on 100s of things, directory listing is one of them, probably not the most important one. If you want to change what your webserver does, change its configuration. Forget about chmod, it will NOT solve the problem. But (yet again and again), if the webserver has an index page to send, it won't send the directory listing... check it in your webserver specific documentation, it will say exactly this same words, I won't be repeating them again.
Whether you can be compromised or not depends on 100s of things, directory listing is one of them, probably not the most important one. If you want to change what your webserver does, change its configuration. Forget about chmod, it will NOT solve the problem. But (yet again and again), if the webserver has an index page to send, it won't send the directory listing... check it in your webserver specific documentation, it will say exactly this same words, I won't be repeating them again.
Author: duncanb7 replied at 2024-12-08 10:55:18
Do you think hacker can read your website dir listing even you have index file whatever blank or not ? That is why I ask
why or how the dir listing can be shown if no index file from server
why or how the dir listing can be shown if no index file from server
Author: duncanb7 replied at 2024-12-08 10:50:23
1) Believe
2) There is no reason we can read dir listing without index file, there must be server can go to somewhere to grab the directory information
to display it in IE once index file is not existed. Where ? We could not say it is on fire to explain the basis thing.
3) Believe .searchindex file for server usage
2) There is no reason we can read dir listing without index file, there must be server can go to somewhere to grab the directory information
to display it in IE once index file is not existed. Where ? We could not say it is on fire to explain the basis thing.
3) Believe .searchindex file for server usage
Expert: Akenathon replied at 2024-12-08 10:36:10
1) Yes, I absolutely do mean that, check your webserver docs if you don't believe it :-)
2) The dir information is not stored anywhere, the webserver reads the dir contents on the fly and presents them as a webpage IF your webserver configuration allows that. Its docs can tell you how to disable this feature
3) I don't know about .searchindex, but I tell you it's NOT related with directory listings. It *could* be an index (NOT a listing) to speed up some sort of queries, but whatever it is, it has nothing to do with the directory listing
2) The dir information is not stored anywhere, the webserver reads the dir contents on the fly and presents them as a webpage IF your webserver configuration allows that. Its docs can tell you how to disable this feature
3) I don't know about .searchindex, but I tell you it's NOT related with directory listings. It *could* be an index (NOT a listing) to speed up some sort of queries, but whatever it is, it has nothing to do with the directory listing
Author: duncanb7 replied at 2024-12-08 10:23:52
So just final ,
You mean If i have one index.html file exsits at public_html directory, others could not read the dir information, Right ?
And do you know where it is stored the dir information, Why they or we can read Index of file directory if no index file.
And why I can still read dir infomration without index file if I change .seachindex file to 700
You mean If i have one index.html file exsits at public_html directory, others could not read the dir information, Right ?
And do you know where it is stored the dir information, Why they or we can read Index of file directory if no index file.
And why I can still read dir infomration without index file if I change .seachindex file to 700
Expert: Akenathon replied at 2024-12-08 10:08:05
Yes, I mean that by creating the page the webserver won't give away the directory listing.
You cannot solve this problem using chmod: your webserver needs access to the directory, or else it won't be able to seve the pages you have there. You can put chmod to 0, but then you will hide both the directory and the pages!
You cannot solve this problem using chmod: your webserver needs access to the directory, or else it won't be able to seve the pages you have there. You can put chmod to 0, but then you will hide both the directory and the pages!
Author: duncanb7 replied at 2024-12-08 09:52:46
You mean when I have index.html file existed whatever is blank or not, other could not read
the dir information, RIght.
I found at root, it is one file called .searchindex in which I found all my directory name
but when i chmod it to 700 I still read directory index of in IE without any index file
Please advise
the dir information, RIght.
I found at root, it is one file called .searchindex in which I found all my directory name
but when i chmod it to 700 I still read directory index of in IE without any index file
Please advise
Expert: Akenathon replied at 2024-12-08 09:38:28
The behaviour you are describing is not IE's. It's your webserver that chooses to send the directory contents when it doesn't find anything like an index page. Two solutions:
1- Easiest: Create an empty index.html, leave it alone and perform your tests in pages with other names (test1.html etc.)
2- Cleanest: Consult the documentation for your specific webserver and see how you can instruct it to deny listing directory contents. I wouldn't bother doing this when just creating an empty page is enough
1- Easiest: Create an empty index.html, leave it alone and perform your tests in pages with other names (test1.html etc.)
2- Cleanest: Consult the documentation for your specific webserver and see how you can instruct it to deny listing directory contents. I wouldn't bother doing this when just creating an empty page is enough
