Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
How can i prevent users from getting the list of files that exist in my website?
For example when users type on the address bar the WebsiteAddress+/DirectoryToSearch/ they get the list of files in that directory, without getting any permission denied error
Is there any setting in asp.net that am i missing?
You should disable directory browsing in IIS.
For IIS7: http://technet.microsoft.com/en-us/library/cc731109%28WS.10%29.aspx
For IIS6: Open the web site’s properties in IIS Manager, and under the tab “Home Directory”, uncheck the checkbox labeled “Directory Browsing”.