Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

How to turn off index viewing by default in EA?

Discussion in 'General Discussion' started by dwh2, Feb 26, 2008.

  1. dwh2

    dwh2 Well-Known Member

    Joined:
    Jan 14, 2004
    Messages:
    106
    Likes Received:
    0
    Trophy Points:
    166
    I don't want people to be able to surf directories by default if there's no index.html file in a directory. I thought I set that up somewhere in WHM, but I guess not.

    I notice that EA3 builds Apache with this directive:

    Code:
    <Directory "/usr/local/apache/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride None
    Order allow,deny
    Allow from all

</Directory>
    If I want it turned off, do I just remove "Indexes" above and run that cpanel program to register the change? Or is it somewhere else?

    Also, may I add a feature request that you add this option into the EA3 builder so we can turn indexes on/off in the httpd.conf by default and let the users override our serverwide default... For security I think directory browsing off would be better.

    P.S. a similar suggestion would be not to default ServerTokens FULL as default...although I changed it to Prod and checked in a server headers tool and it's still showing my PHP version for some reason...
     
    #1 dwh2, Feb 26, 2008
  2. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,216
    Likes Received:
    10
    Trophy Points:
    313
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    Individual account owners can turn off index viewing by going to cPanel -> Advanced -> Index Manager.
     
    #2 cPanelDavidG, Feb 26, 2008
  3. dwh2

    dwh2 Well-Known Member

    Joined:
    Jan 14, 2004
    Messages:
    106
    Likes Received:
    0
    Trophy Points:
    166
    OK, how about the reverse...turning it off by default serverwide? That's what I was looking for.
     
    #3 dwh2, Feb 26, 2008
  4. jayh38

    jayh38 Well-Known Member

    Joined:
    Mar 3, 2006
    Messages:
    1,215
    Likes Received:
    0
    Trophy Points:
    166
    in the servers /home create a .htaccess with the following:

    Options All -Indexes
     
    #4 jayh38, Feb 26, 2008
  5. dwh2

    dwh2 Well-Known Member

    Joined:
    Jan 14, 2004
    Messages:
    106
    Likes Received:
    0
    Trophy Points:
    166
    Thanks...so just /home/.htaccess and it will propagate to the directories below it?

    Wow, cool.
     
    #5 dwh2, Feb 27, 2008
  6. jayh38

    jayh38 Well-Known Member

    Joined:
    Mar 3, 2006
    Messages:
    1,215
    Likes Received:
    0
    Trophy Points:
    166
    Yep you got it..
     
    #6 jayh38, Feb 27, 2008
  7. jamesbond

    jamesbond Well-Known Member

    Joined:
    Oct 9, 2002
    Messages:
    738
    Likes Received:
    1
    Trophy Points:
    168
    If you enable index viewing by default, why not give people the option to turn off index viewing when compiling apache?

    Don't most hosts/server owners have indexing turned off for security reasons? Why enable it server wide by default if generally only a handful of users on a server might actually be interested in it. IMO it makes more sense to disable it by default and have the few users that need it enable it in their own cpanel account.
     
    #7 jamesbond, Feb 27, 2008
  8. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,216
    Likes Received:
    10
    Trophy Points:
    313
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    That sounds like a good idea for an official feature request. You can submit official feature requests to http://bugzilla.cpanel.net
     
    #8 cPanelDavidG, Feb 27, 2008
  9. mstuebner

    mstuebner Well-Known Member

    Joined:
    May 13, 2007
    Messages:
    50
    Likes Received:
    0
    Trophy Points:
    156
    Wow, isn't that a bit too big, instead of just modifying the vhost templates and to add -Indexes to Options?
     
    #9 mstuebner, Feb 27, 2008
  10. dwh2

    dwh2 Well-Known Member

    Joined:
    Jan 14, 2004
    Messages:
    106
    Likes Received:
    0
    Trophy Points:
    166
    That's what I meant to say in the first post.
     
    #10 dwh2, Feb 27, 2008
  11. forlinuxsupport

    forlinuxsupport Well-Known Member
    PartnerNOC

    Joined:
    Dec 22, 2004
    Messages:
    386
    Likes Received:
    0
    Trophy Points:
    166
    cPanel Access Level:
    Root Administrator
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #11 forlinuxsupport, Aug 11, 2008
  12. cesare

    cesare Registered

    Joined:
    Mar 16, 2006
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    151
    Im fairly new to this, but I have the understanding that using .htaccess files will create a recursive search through the subdirectories.
    Could someone more knowledgeable please elaborate on the consequences, compared to using a directive instead?
     
    #12 cesare, Sep 12, 2008
(You must log in or sign up to post here.)
Loading...
Similar Threads - turn index viewing
  1. thepaperdragon

    Mail delivery failed: returning message to sender

    thepaperdragon, Oct 16, 2018, in forum: E-mail Discussion
    Replies:
    3
    Views:
    75
    Sky Media
    Oct 18, 2018 at 4:42 AM
  2. erfg1234

    AH00524: Handler for (null) returned invalid result code 70008

    erfg1234, Oct 12, 2018, in forum: General Discussion
    Replies:
    1
    Views:
    85
    cPanelLauren
    Oct 12, 2018
  3. bouvrie

    WHMAPI1 dumpzone not returning actual record

    bouvrie, Oct 4, 2018, in forum: cPanel Developers
    Replies:
    1
    Views:
    55
    cPanelLauren
    Oct 9, 2018
  4. JJ100

    Site traffic affected by having SSL automatically turned on

    JJ100, Sep 26, 2018, in forum: Security
    Replies:
    19
    Views:
    287
    Infopro
    Oct 4, 2018
  5. triatlas

    Cannot turn off logging to php.error.log

    triatlas, Sep 25, 2018, in forum: General Discussion
    Replies:
    5
    Views:
    108
    cPanelLauren
    Oct 3, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice