apache php access rights configuration
- by AndreasT
Hi,
I am a complete apache and co newb.
Currently it serves only the default page.
On the default page, the user can not list the directory or files.
When I create a directory, say
/var/www/foobar
and place files in it, the user can by doing:
www.mydomain.org/foobar
see the contents of the directory.
I run pretty much the default configuration.
on Directory "/", I have FollowSymlinks and AllowOverride(none)
on what DocumentRoot points to I have Indexes FollowSymlinks MultiViews
and "allow from all" set.
My questions are:
Can I stop people from listing subdirectories?
Can people, if I do not change the configuration, in some way read the php files in there? (I mean not the rendered page, I mean the .php page source.)
Pointers to good resources about this would also be nice.
Thx in Advance.
