Question concerning listing and protecting directories

Customer Support H-Sphere Shared Hosting
1

Is directory listing turned off by default for protection on the windows servers?

Does the web site displays the ?Directory listing denied? error. ?

Is index.htm or index.html the only default document allowed.?

How do I protect a directory from external viewing, accessing, stripping.?

greetings from Holland

Liam

2

[QUOTE=Larneman]
[ol]
[li]Is directory listing turned off by default for protection on the windows servers?
[/li][li]Does the web site displays the ?Directory listing denied? error. ?
[/li][li]Is index.htm or index.html the only default document allowed.?
[/li][li]How do I protect a directory from external viewing, accessing, stripping.?
[/li][/ol]
[/QUOTE]

[ol]
[li]Disabled by default, you can enable it from the control panel. I wouldn’t call “security by obscurity” real protection :slight_smile:
[/li][li]Yes. You can customize error pages in the control panel.
[/li][li]The standard order on Windows is something like default.htm, default.html, default.asp, index.html, index.htm, but it’s fully customizable.
[/li][li]You can just create a directory one level higher than your webroot. That makes it accessible for FTP, but safe from any HTTP access. There’s also .htaccess support for Windows.
[/li][/ol]

3

[QUOTE=SubSpace]
There’s also .htaccess support for Windows.
[/QUOTE]

Is this true???

4

Yes, it has been this way for some time, use webshell to protect the folders/files.

But, it is ONLY protection, not traditional apache directives.

5

Thanks SubSpace for all those great answers. :slight_smile:

6

[QUOTE=Stephen]
Yes, it has been this way for some time, use webshell to protect the folders/files.

But, it is ONLY protection, not traditional apache directives.
[/QUOTE]

Any chance of a more detailed explaination on the use of this option or is there a FAQ or a help sheet.? Not all the people that host here are computer experts.

Liam

7

Like Stephen said, use Webshell4 (available from the control panel as File Manager) to protect directories. It will help you set up a password file for various logins that have access, etc.

The .htprotect file that is created is very basic:

AuthType basic AuthName "Secured area" AuthUserFile d:/hshome/yourlogin/.htmaster/.ok_user Require valid-user

The only thing you likely want to change here is the value of the AuthName directive. This determines the text on the password prompt you’ll receive when trying to access the directory.

As far as I know, there’s no support for any other Apache directives. I couldn’t confirm this as there is no extensive documentation I know of, but even a basic Apache “Deny from all” doesn’t work :slight_smile:

8

And for the second time, THANKS, :stuck_out_tongue: SubSpace. That is an explaination that a simple soul like me can use and needs.

greetings from a cold wet Ymuiden,

Liam

9

http://www.psoft.net/HSdocumentation/user/tools.html#webshell

According to that, if you need help in more detail once you get into webshell, click the built in help button

10

Thanks Stephen, I googled for “.htaccess for windows” and I should have been looking for “htProtect”.

Thanks for the great help, to both of you.

greetings from Hoogwoud,

Liam