Disable directory index 📁 on Apache

Disable directory index 📁 on Apache

Summary:

When Apache Directory Index is enabled, if you browse to a url that have no index file present, you will see list of all files. This is not good for securiy as hackers can see all files present in the directory.

Directory listing is generated by Apache module mod_autoindex, to disable this module:

a2dismod autoindex -f
systemctl restart apache2

If you don’t have root access, another way to disable directory index in Apache is to simply create a blank index.php or index.html file inside the directory:

touch index.php

Or add the following in your .htaccess file:

Options -Indexes
whoami
Stefan Pejcic
Join the discussion

I enjoy constructive responses and professional comments to my posts, and invite anyone to comment or link to my site.