Somewhat a security issue

whipworks

• March 11, 2015 08:37

Hi guys. Don't know how to describe this, but recently we saw some flaws on one our the sites the we have. So basically what's happened is that when you go to a link on the site, it shows up the page. But then when you delete part of the link and hit enter again, it shows up the index directory of the website that shows the files from the server. It's like having instant FTP access. We bumped into this by accident. And wanted to know how to avoid this from coming up. In my mind, when you mistyped a link, it shouldn't show you anything besides the link is incorrect. Hope you guys can help. Thanks! :)

• 

  cPanelMichael

  • March 11, 2015 19:15

  Hello, Check to see if "Indexes" is enabled via: "WHM Home " Service Configuration " Apache Configuration " Global Configuration" You can disable it to stop the behavior that you have described. Thank you.

  0
• 

  whipworks

  • March 16, 2015 13:01

  Hello, Check to see if "Indexes" is enabled via: "WHM Home " Service Configuration " Apache Configuration " Global Configuration" You can disable it to stop the behavior that you have described. Thank you.

  
  Thanks Michael. I'll try this and let you know if ever ;)

  0
• 

  whipworks

  • March 16, 2015 14:25

  Hi Michael. Asked to restart and rebuild Apache. Just wanting to know if I really need to do this. Just trying to avoid further complications. Last time we restarted Apache, it gave us problems. Thanks.

  0
• 

  cPanelMichael

  • March 16, 2015 15:45

  Could you elaborate on what problems you encountered when restarting Apache? It's typically a normal action to restart the Apache web server. Graceful restarts likely already happen in the background on a regular basis. Thank you.

  0

Please sign in to leave a comment.