Directory Browsing Enabled By Default?

[Logicman]

Hi folks.

 

I was setting up a site and I noticed that if you don't have an index file, it shows you the directory contents i.e, directory browsing is enabled by default, which presents a security risk.

 

Why isn't this switched off as a default?

[TCH-Bruce]

You can turn it off in cPanel. Select Index Manager.

[Logicman]

You can turn it off in cPanel.  Select Index Manager.

<{POST_SNAPBACK}>

 

Thanks, Bruce. I'll do that.

 

I still think, however, that it shouldn't be on as a default setting

[TCH-Don]

You can also put an index file in your reseller account > skeleton > public_html folder and then any accounts you create will have that index file.

 

To display the skeleton directory path in WHM

Click on the Skeleton Directory link in the Account Functions menu.

The skeleton directory path is now displayed

 

You can also have a default .htaccess file for your accounts.

[Deverill]

I'm just guessing but I'd say it may be the way the software works that we use to provision accounts. Some things, like Cpanel, come preconfigured a certain way and it would take an act of Congress to change them.

[Logicman]

Some things, like Cpanel, come preconfigured a certain way and it would take an act of Congress to change them.

 

ROFL.