[Solved] Bug... Risk Level High

oriname1

Why is it possible for signed members and vistors to browse the Vanilla folder directories and sub directories... from their browser...eg
http://localhost/vanilla/applications/
http://localhost/vanilla/dashboard/
http://localhost/vanilla/skeleton/
http://localhost/vanilla/vanilla/

When i typed the above url i can see and edit the files...

idontwanttortfm

This behavior is the result of your web server configuration. For example, if you're using Apache for your webserver, you can prevent this in the server config by creating or modifying a Directory entry and excluding Indexs from the Options line. If .htaccess files are allowed, you can create or edit the .htaccess file in the Vanilla directory with this line:

Options -Indexes

oriname1

Added the Options -Indexes to the .htaccess file in the vanilla directory. It worked. Thanks

garymardell

Its not a huge problem, as anyone can download a copy of vanilla and see the file structure.

Shadowdare

Excellent solution. Thanks!