Solved: Viewing Files In A HTML Directory Tree

Welcome to TSG rolfman22 !! They are correct Directory Browsing is not supported by most ISP's for security reasons. The ones you saw may have been private servers setup to allow the search for other reasons.

If the server is Apache and it allows the use of .htaccess files; you can setup the .htaccess file to allow file indexes.

Usually if there is no index file in a directory, it will do that automatcally.

I have done some research on Directory Browsing, and I am going to try some php scripts I found. I will let you know how it goes. Thanks for all the suggestions!

namenotfound said:

Usually if there is no index file in a directory, it will do that automatcally.

Click to expand...

Most Web Hosting companies will turn off file indexing on their servers for security reasons. You can use an .htaccess file on apache servers to turn it back on for a specific directory.

rolfman22 said:

I have done some research on Directory Browsing, and I am going to try some php scripts I found. I will let you know how it goes. Thanks for all the suggestions!

Click to expand...

THis would be the simpler approach if the server is running Apache. Just create an .htaccess file and put Options +Indexes in it.

http://www.javascriptkit.com/howto/htaccess11.shtml

Squashman said:

Most Web Hosting companies will turn off file indexing on their servers for security reasons. You can use an .htaccess file on apache servers to turn it back on for a specific directory.

Click to expand...

Which ones?
Every host I ever delt with have it turned on by default.
Most of the time, I have to turn it off myself
Usually instead of turning it off, I just do the lazy thing and add a blank index file to each directory I'm only using for files, like images etc.

Probably the same sites that get hacked because they are laxed on their security.

Well none of my sites were ever hacked
And the host I'm currently using has never been hacked.

B-I-N-G-O

.htaccess Worked!

Thanks!

Take a moment to mark this solved in the thread tools.

namenotfound said:

Well none of my sites were ever hacked
And the host I'm currently using has never been hacked.

Click to expand...

Do you think they would tell you if they were hacked. Most places deny ever being hacked unless it has been leaked by someone internally.

Glas I could help solve the problem.

I have a site that has no links at all on the home page. I let people access other pages and directories by having them enter the names in the url. This question makes it sound like anyone could get a listing of the directory on my site if they follow the technique mentioned here. Is that correct?

For example, my home page is site.com. I tell people to enter site.com/secret to access the "secret" directory. Now I'm afraid anyone can now use this technique to see that I have a directory called "secret". Is that so??

Do you have directory listing enabled?
And what's going to stop someone from sharing the "Secret" URL?

How could I tell if I have directory listing enabled? I'm just a beginner with this. I use Yahoo web hosting - is this an Apache setting I could check somewhere?

I'm not so worried about folks I tell telling others, as I am about anyone on the web looking at the "secret" stuff.

Thanks for your help!

I would think Yahoo has directory listing disabled.
You should put a password on your 'secret' files to protect it.

How could I check to see if I can list the directory? I tried the technique mentioned earlier in this thread, and it didn't work, but are there other ways to try to list the directory of a site??

Thanks again...

No...just go to a directory and see if the list shows up.