May be this is a stupid question, but I really don't know why I can't list the files in the root folder of a website(I didn't put any index.html or index.php in the folder).
I point my domain.com to /home/user/docs, the server can list domain.com/test/ files. But it can't list the files of domain.com/. It just shows the page at /var/www/htm, if I don't have any index file under /home/user/docs.
I have this in the httpd.conf file:
<Directory "/home/user/docs">
Options +Indexes
allow from all
</Directory>
I've just made a transition from a VDS to a Dedicated and I'm having problems preventing directory contents from showing. In my previous server whenever I created a directory, it would automatically give a 403 when you tried to access the directory directly in your browser (which is what I want). Now when I set up directories in this new dedicated the contents of the directories display when there is either no index page or if I didn't have an htaccess file preventing it from listing the contents.
So what im asking is how did my previous server automatically set up the directories to not display the contents but use the contents and allow access to say for example pictures in the directory?
Is there a way I can have apache automatically do this for me or do I have to place a blank index page in every directory i create or have to place an htaccess file in every directory I create? How can I protect the contents with a 403 but still allow the contents to be accessed only through full path?
Initially I was able to connect via FTP. Then all of a sudden I started getting 550 SSL/TLS required on the control channel. Why did it suddenly required SSL/TLS when I did not do anything extra?
Now when I'm trying to connect via FTPES using FileZilla (tried both active and passive) on Linux Mint Debian, I'm getting the error below. I'm really stumped. I have tried to Allow incoming from all on port 49152-65534/tcp via Plesk firewall, but still no go.
The worst thing now is, I can't even get FTP to work anymore. Of course I would prefer to have TLS working.
Status:Connection established, waiting for welcome message... Response:220 ProFTPD 1.3.5 Server (ProFTPD) [206.106.213.243] Command:AUTH TLS
Today I try to fit all FW rules to my need. After i blocked the traffic "allow other incoming traffic" in the Plesk FW i dont get folders listed via FTP. The FTP client connect to my server, but listing content times out. After allow other traffic the content get listed. The rule "Allow FTP connections" ist in all enabled all the time.
I enabled plesk firewall to my ip now I cant seem retrieve directory listing. I've done the same with ssh that works fine.
Response:230 User logged in Command:OPTS UTF8 ON Response:200 UTF8 set to on Status:Connected Status:Retrieving directory listing... Command:PWD Response:257 "/" is the current directory Command:TYPE I Response:200 Type set to I Command:PASV Response:227 Entering Passive Mode Command:MLSD Error:Connection timed out Error:Failed to retrieve directory listing
I have a public website, unfortunately, I believed it was being hacked and now the page only display:Directory listing Denied. This Virtual Directory does not allow to be listed..
How could I solve it?My website just consists of one phpbb forum and some html files.
Command:MLSD Response:150 Accepted data connection Response:226-ASCII Response:226-Options: -a -l Response:226 24 matches total Error:Connection timed out Error:Failed to retrieve directory listing
I am trying to get Apache to disable .htaccess overrides and php for a certain directory (and it's subdirectories).
I can disable PHP scripting using a .htaccess file containing:
Code: Options -ExecCGI -Indexes
I now want to disable .htaccess overrides, which Apache's documentation says is only possible in a <Directory> directive. I have therefore attempted to add the following to the website's Virtual host in httpd.conf:
However, the above posted .htaccess file (which is located in /home/ceejayce/www/dropbox/2007/.htaccess) still runs and disables ExecCGI and Indexes. So, it looks like the <Directory> directive is not being processed? I have tried it outside the virtual host, straight into the config file - but it works the same way.
Apache's error log says nothing, other than ExecCGI is off in this directory and Directory Index is forbidden (so basically it's reading the options from the .htaccess file and applying them).
I want to make a folder than can only serve static content (no php etc).
When I enter my_domain.com the browser displays index.php located in httpdocs on my server. When I enter my_domain.com/main/ the browser displays another page, but there's no directory "main" in my httpdocs. Somehow it's redirected to another location (but in URL bar in the browser it's still my_comain.com/main/). I need to find that location.
As I searched through the web, such redirection can be made in .htaccess file, but I can't locate this one either. My server is Apache on CentOS6, and httpdocs directory is located in /var/www/vhosts/my_domain.com. I searched for .htaccess in several locations that I googled, I also tried executing "find / -type d -name '.htaccess'" on PuTTy, but it gives no results.
When I open my site in a browser and I point the URL to specifically // ipaddress / location A it's all good. (Apache Server)..My problem is, if you open the site in a browser with just the IP address alone it goes there for a second and then automaticlly goes to and opens the other site in location // ipaddress / location B.
However, what I need it to do, I think, is edit the apache conf file to make it open location A as the default. What do I need to do in the apache (httpd-conf) to fix that? For that matter is that the right file to edit?
I would like to write a rewrite rule that does the following:
RewriteEngine On
Redirect 301 URL...
So what I want is that the first url is rewritten to go to the second ..I have a whole bunch of links that I have to redirect, so I would like to place them all into one .htaccess file or into the default configuration file of apache. So what I do not want is to create SomeFolder1 and someOtherFolder2 and to place a .htaccess file into that place in order to make it work. In fact I want to ignore the folders of the old link and only use the pagename.
Earlier I made a setup using UNC path in my Apache configuration. I managed to make this work. Now on another installation using Apache 2.2.22 nothing works like before.
I have home a server Apache. I want to put all my party songs in one partition and can listen from anywhere without having to take CDs. I have my site in C:Site and the songs I put it in D:Songs.
In php I see the D:Songs directory, I can read subdirectories, I see the .mp3 and .Wav files, I created the playlist, but the audio player doesn't start.
If I move the songs files in C:Site or C:SiteSongs goes perfectly, I can listen my music, but I do not want to be there. Why I see in D:Songs, but does not want to go? In httpd.conf I have:
DocumentRoot "C:/Site/" <Directory /> Options FollowSymLinks AllowOverride None Order allow,deny Allow from all </Directory>
and
<Directory "C:/Site/"> Options Indexes FollowSymLinks AllowOverride all Order Allow,Deny Allow from all </Directory>
I try to put also:
<Directory "D:/Songs/"> Options Indexes FollowSymLinks AllowOverride all Order Allow,Deny Allow from all </Directory>
I have an ecommerce store. dns at godaddy. A record www points to the 3dr party hosted shopping cart solution on ip a.a.a.a. I also have a blog. A record blog subdomain points to another server b on ip b.b.b.b hosted away from the shopping cart server a completely.
So www goes one place and blog goes to another.The problem is I need to somehow make the blog appear within the main site as URL...blog instead of as a subdomain blog.domain.com.
I cannot access or modify the hosted shopping cart server in any way. I cannot load wordpress there, that is why it is on a completely separate server.I've been told this is perhaps possible with a reverse proxy configuraton on server b where ip b.b.b.b is.So that even though blog. points to server b it can appear that the url is www.mydomain.com/blog and the blog pages off that directory as well.Can this be done via reverse proxy?
I have a number of WordPress, Drupal, Wiki sites running under RHEL6.
Apache version:httpd -v Server version: Apache/2.2.15 (Unix) Server built: Aug 2 2013 08:02:18
We are subject to internal scans by Appscan and Tenable. It is a security requirement so I cannot just block them.
The scanners, of course, attempt to recurse the directory structure and find vulnerable files such as boot.ini, winnt.com and such.
This drives the php content management systems nuts. Request comes in and is handled by php. PHP checks the cache for that name and does not find it. PHP generates a MySQL query and sends it. MySQL tries and fails to satisfy the query. MySQL returns result to php. PHP Writes a cached of the result and presents it to the web.
In other words, a whole lot of processor/memory.
The security scans typically look like......
[Thu Aug 29 00:35:15 2013] [error] [client XXX.XXX.XXX.XXX] Invalid URI in request GET /../../../../../../../../../../../../etc/passwd HTTP/1.1 [Thu Aug 29 00:35:15 2013] [error] [client XXX.XXX.XXX.XXX] Invalid URI in request GET ../../../../../../../../../../../../etc/passwd HTTP/1.1 [Thu Aug 29 00:35:15 2013] [error] [client XXX.XXX.XXX.XXX] Invalid URI in request GET //../../../../../../../../../../../../etc/passwd HTTP/1.1 [Thu Aug 29 00:32:26 2013] [error] [client XXX.XXX.XXX.XXX] Invalid URI in request GET ....................windowswin.ini HTTP/1.1 [Thu Aug 29 00:32:26 2013] [error] [client XXX.XXX.XXX.XXX] Invalid URI in request GET ....................winntwin.ini HTTP/1.1
I have been able to improve performance, speed and security by mod_rewrite
RewriteRule .*.(dll|ini|exe|com)$ - [R=404,NC]
Now (Finally) the question.
I have not been able to create a rule for the directory recursion.
I want to R=404 any that has a "../.." or "...." or ...." but I can not get it to recognize the string correctly.
I believe that this would improve speed and security.
I am having a lot of problem in implementing mod-rewrite in the Apache 2.0 server due to its configuration that it has the Virtual Directory Support "Disabled".
I got this information from the function phpinfo() which displays a lot of other configuration values along with that.
Now I am unable to enable this Virtual Directory Support in the server and for this my mod-rewrite through .htaccess is not working at all.Subhasis
I am running Apache2 server (version 2.2.16) on Debian Linux.
My document root for directory listings is set and in that folder I have a few other files to configure the formatting and visual effects. These are:
images(folder) sorttable.js style.css index.php
These files make the root directory look very nice. If I navigate in to a subdirectory, all of the formatting and visual effects are lost and the standard text layout is shown. Is there a way I can get ALL subdirectories in the root directory to take on the visual and layout effects from the root directory?
I know it works if I manually copy each of the files to each of the subdirectories which would be fine, but the subdirectories are created dynamically and new ones are added regularly.
I am trying to set up log rotation on my Apache Server on Windows 2008 using the rotatelogs.exe executable. I believe I am having issues because my directory path has spaces.
From my understanding, a full path is needed for the ErrorLog but not for the CustomLog
