{"id":29998,"date":"2021-01-18T02:49:10","date_gmt":"2021-01-17T18:49:10","guid":{"rendered":"https:\/\/web.mwwsb.com.my\/pjci\/?post_type=kb&p=29998"},"modified":"2022-09-08T21:40:35","modified_gmt":"2022-09-08T13:40:35","slug":"how-to-disable-directory-browsing","status":"publish","type":"kb","link":"https:\/\/www.casbay.com\/guide\/kb\/how-to-disable-directory-browsing","title":{"rendered":"HOW TO: disable directory browsing"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t

What is Directory Browsing?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Directory Browsing or Directory Listing<\/strong> allows anyone to see all the files and folders when they access a website using web browser instead of webpage.<\/p>

The web server that hosts your site not only display web pages but also the content of your web directories and other files. This happens as there is no index file<\/strong> (index.html. index.php etc) in the directory, therefore the web server did not receive the instruction to decide which web pages to display.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

Why Disable Directory Listing?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

First of all, information disclosure issue<\/strong> will happen if a web server is configured to display all your website contents. This would aid an attacker or hacker to attack your blog.<\/p>

Imagine that all your critical and confidential contents of restricted files are displayed, a hacker will potentially exploit your website vulnerabilities<\/strong> like WordPress plugins, themes, core etc. This would give him important insights into website configuration.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

How to Disable Directory Listing<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
    \n \t
  1. Firstly, we recommend you to backup<\/strong> your site before making any changes.<\/li>
    \n \t
  2. Next, navigate to the different folders<\/strong> of your website in your browser to see if a list of files is displayed instead of a web page.<\/li>
    \n \t
  3. If you don’t find any folders that are displaying file lists, you can stop at this step.<\/li>
    \n \t
  4. Then, access the File Manager<\/strong> for your hosting plan. (Business Web Hosting<\/a>\u00a0\/\u00a0Email Hosting<\/a>)<\/li>
    \n \t
  5. Navigate to the folder that displayed a directory browsing.<\/li>
    \n \t
  6. Edit the .htaccess (Linux) <\/strong>or web.config (Windows) file<\/strong>.\n