I don't want people to be able to surf directories by default if there's no index.html file in a directory. I thought I set that up somewhere in WHM, but I guess not.
I notice that EA3 builds Apache with this directive:
If I want it turned off, do I just remove "Indexes" above and run that cpanel program to register the change? Or is it somewhere else?
Also, may I add a feature request that you add this option into the EA3 builder so we can turn indexes on/off in the httpd.conf by default and let the users override our serverwide default... For security I think directory browsing off would be better.
P.S. a similar suggestion would be not to default ServerTokens FULL as default...although I changed it to Prod and checked in a server headers tool and it's still showing my PHP version for some reason...
I notice that EA3 builds Apache with this directive:
Code:
<Directory "/usr/local/apache/htdocs">
Options Indexes FollowSymLinks
AllowOverride None
Order allow,deny
Allow from all
</Directory>
Also, may I add a feature request that you add this option into the EA3 builder so we can turn indexes on/off in the httpd.conf by default and let the users override our serverwide default... For security I think directory browsing off would be better.
P.S. a similar suggestion would be not to default ServerTokens FULL as default...although I changed it to Prod and checked in a server headers tool and it's still showing my PHP version for some reason...