Skip to main content

Disable directory listing

timesurfer
Hi, How can directory listing be globally disabled in WHM? Google tells me how to do it in cPanel. But in would prefer to set it server wide.

Comments

11 comments

Date Votes
  • 24x7server
    Please refer to the below steps to disable the directory listing globally in WHM: 1) Login to WHM. 2) In the search box type the Apache Configuration. 3) Click on Apache configuration. 4) Then click on the Global Configuration. 5) Untick Indexes option which is present under "Directory "/" Options". 6) Click on the Save button. 7) After that Rebuild Apache conf.
    0
  • keat63
    Could you guys explain what this function achieves please. Would this have any impicationts on web site functionality and google indexing etc.
    0
  • timesurfer
    Please refer to the below steps to disable the directory listing globally in WHM: 1) Login to WHM. 2) In the search box type the Apache Configuration. 3) Click on Apache configuration. 4) Then click on the Global Configuration. 5) Untick Indexes option which is present under "Directory "/" Options". 6) Click on the Save button. 7) After that Rebuild Apache conf.

    Thank you, 24x7!
    0
  • timesurfer
    Could you guys explain what this function achieves please. Would this have any impicationts on web site functionality and google indexing etc.

    "Why You Need to Disable Directory Browsing in WordPress Directory browsing can be used by hackers to find out if you have any files with known vulnerabilities, so they can take advantage of these files to gain access. For the comprehensive security of our sites, we use Sucuri for WordPress security. They have a simple dashboard which allows us to do this and perform many other WordPress security strengthening steps with in few clicks. Directory browsing can also be used by other people to look into your files, copy images, find out your directory structure, and other information. This is why it is highly recommended that you turn off directory indexing and browsing." For more details, search the internet about: disable directory listing. And you should be presented by some articles that will provide you with the information you need.
    0
  • keat63
    Thanks Iv'e disabled indexing at apache level. If it's so important, why is the default set to ON.
    0
  • cPanelLauren
    Thanks Iv'e disabled indexing at apache level. If it's so important, why is the default set to ON.

    This is a result of it being the default for Apache2
    0
  • keat63
    I assume that as a security feature it's not a bad idea to apply this. Having said that, I've had WHM for about 5 years now (maybe even 6), and only just applied this change. Better late than never I suppose.
    0
  • actihost
    Hello, so does disable WHM Apache directory indexing is recommended? I understand that is the default apache setting but there is no "Recommended" flag in WHM like so many options in tweak settings / exim. BTW: looking to the Process Manager I do notice some wasted system resources on accounts with empty public_html folders i believe because of bots, etc. Disabling apache indexing can avoid that to right?
    0
  • cPRex Jurassic Moderator
    @actihost - it's completely a personal preference. Some users don't like the directory listing to show up and some do.
    0
  • actihost
    @actihost - it's completely a personal preference. Some users don't like the directory listing to show up and some do.

    Hello Rex! oh ok, so there is no security advantage in do that?
    0
  • cPRex Jurassic Moderator
    No matter which option you choose, the files are still accessible on the web. The directory listing just allows a user to see a list of files if there is no index page in that directory. Some admins don't like that happening.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post