If you publish your html pages into your main directory, your homepage has a specific name. Perhaps its index.html or index.htm. So, let's say you've been putting in content for awhile now and its getting out of hand. You decide to break it out into directories. Great idea! One catch, and a common one, make sure each of your pages has a default page, just like your homepage. Why? If you don't include the default or index page, anyone can have access to your entire site via a directory listing. Its an invitation: Take my site contents, please!
It works like this, no default or index page found, the browser lists all the contents of the directory, just like your hard drive does on your local system. Guess what? They also have access to the entire system, not just the directory they are in. They can step up to a higher directory level and move around all of your directories.
So what can you do?
First Suggestion: Create a default page for each folder you use on your site. It can list the contents of the directory in a pretty format. You don't have to list any pages you don't want people to see yet.
Second Suggestion: Protect any directories that have special content. Content you don't want to share with the world. Put a password protection on it. Your webmaster, support person or you can establish it in your website control panel.
0 responses so far ↓
There are no comments yet...Kick things off by filling out the form below.
Leave a Comment