I’ve got a site with some administrative pages in its root directory. Question: Is there any possible way for a visitor to see all the pages and/or subdirectories in the root directory of this (or any other) site?
If yes, what has to be done to conceal the directory’s content?
Thank you!
You can set this permission in the web server. For IIS there is a enable directory browsing property that can be set on website, virtual directories and applications.
For Apache:
In httpd.conf search for Options, if Indexes is present Directory browsing is enabled else it is disabled
Options All Indexes FollowSymLinks MultiViews (Directory browsing Enabled)
Options All FollowSymLinks MultiViews (Directory browsing Disabled)