Home   News  Product reviews  Website reviews  Forums   Competitions  Subscribe 


Web Building >> Web design & build

 |  Print Thread
Zippy_Brown
regular


Reg'd: Fri
Posts: 88
Loc: /dev/null
Re: Protection to Directory
      Wed Mar 26 2008 11:10 PM

Another good idea is to upload a blank index.html or index.php file. This will force a blank page to be displayed rather than the file contents.

You can also upload a .htaccess file with the following line, which will still allow the contents page to show, but it would be empty (prevents the files from appearing):
Code:
IndexIgnore *



Quote:

when you type the directory you get the Index directory to which others can open my php scripts and access my server database.



If you upload these to a webserver with php installed, then visitors will not see the content of the php scripts, as it will be parsed by the server.
Additionally, you should make sure any config files (which include your database username and password) are stored below the web folder (normally called public_html or www) and then included in your script. This way, the risk of these details being discovered by a visitor is greatly reduced.

--------------------
Zippy

Post Extras Print Post   Remind Me!     Notify Moderator
Rate this thread

Jump to


Entire topic
Subject Posted by Posted on
* Protection to Directory Stuarty Wed Mar 26 2008 12:45 PM
. * * Re: Protection to Directory Zippy_Brown   Wed Mar 26 2008 11:10 PM
. * * Re: Protection to Directory Stuarty   Wed Mar 26 2008 03:42 PM

Extra information
0 registered and 3 anonymous users are browsing this forum.

Moderator:  putasolutions, Joe_London, greysts, bricat, Nanook, Hello_There, John_McKenna, Mouse, TheFatControlleR 


Print Thread
Forum Permissions
      You cannot start new topics
      You cannot reply to topics
      HTML is disabled
      Mark-up is enabled

Rating:
Thread views: 0

Contact Us | Privacy statement Main website