Home/ Questions/Q 8057101
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-05T08:55:15+00:00

I have an apache server where I have disabled the ability to read the

  • 0

I have an apache server where I have disabled the ability to read the contents of a directory where you specify the directory path ie. http://www.domain.com/directory

I have renamed a directory that is not linked from any html pages to something ridiculously long and random and inserted a series of PDF’s.

From my perspective unless someone knows the name of the directory and name of the pdf there is no chance they can view the PDF? Is this a somewhat safe assumnption? Are there scripts the little script kiddies can run remotely to view the directories off the root webdirectory and then contents or is this reasonably secure?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    What are the contents of these PDF’s. If they contain sensitive or personal data, then your solution is probably not advisable i.e you need to make a impact assessment if data is comprimised.

    In your scenario you should make sure that there is nothing in your configuration that enables directory listing of the above directory, so check any Options directives. Secondly, if you support requests to post data to ordinal url (i.e the directory) then makes sure you don’t let a user post an .htaccess file that includes configuration enabling directory listing.

    • 0