Apache禁止浏览目录

当我们访问某个网站时,在后面增加相应的目录,就可以浏览到目录,对于网站来说,是很不安全的。 

   
    解决办法:
        1、编辑httpd.conf文件
           vi ./conf/httpd.conf

   找到如下内容:
          ......
         <Directory "C:/Program Files/Apache2.2/htdocs">
              #
              # Possible values for the Options directive are "None", "All",
              # or any combination of:
                 Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
              #
              # Note that "MultiViews" must be named *explicitly* --- "Options All"
              # doesn't give it to you.
              #
              # The Options directive is both complicated and important.  Please see
              # http://httpd.apache.org/docs/2.2/mod/core.html#options
              # for more information.
              #
             Options Indexes FollowSymLinks

              #
              # AllowOverride controls what directives may be placed in .htaccess files.
              # It can be "All", "None", or any combination of the keywords:
              #   Options FileInfo AuthConfig Limit
              #
             AllowOverride None

              #
              # Controls who can get stuff from this server.
              #
             Order allow,deny
             Allow from all

         </Directory>
          ......

   在Options Indexes FollowSymLinks在Indexes前面加上 -  符号。
        即: Options -Indexes FollowSymLinks
   【备注:在Indexes前,加 + 代表允许目录浏览;加 -  代表禁止目录浏览。】

    这样的话就属于整个Apache禁止目录浏览了。

    如果是在虚拟主机中,只要增加如下信息就行:
注意:虚拟主机中,在上面的  Options Indexes FollowSymLinks 注释掉,虚拟主机才起作用。
           <Directory "D:\test">
             Options -Indexes FollowSymLinks
             AllowOverride None
             Order deny,allow
             Allow from all
         </Directory>
     这样的话就禁止在test工程下进行目录浏览。

备注: 切记莫把“Allow from all”改成 “Deny from all”,否则,整个网站都不能被打开。 
 
http://morgan363.javaeye.com/blog/645363
 
 

请问Apache如何屏蔽目录列表同时保留目录访问的默认页面?

关键字: php
在Apache的配置文件httpd.conf中找到需要设置目录的Directory属性,并在Options一行去掉Indexes  
  比如说:  
  <Directory   "d:\web">  
          Options   Indexes   FollowSymLinks  
  </Directory>  
  改为:  
  <Directory   "d:\web">  
          Options   FollowSymLinks  
  </Directory>  

-----------------------------------------------------------------
Alias   /edit/   "/home/dbphp/db/"  
   
          <Directory   "/home/dbphp/db">  
                  Options   Indexes   MultiViews           =>           Options   MultiViews            
                  AllowOverride   None  
                  Order   allow,deny  
                  Allow   from   all  
          </Directory>  
   
  把Indexes去掉后,就不允许列表了。
posted @ 2012-07-11 16:05  上帝爱编程  阅读(219)  评论(0编辑  收藏  举报