Disable directory index 📁 on Apache

March 6, 2021Apache

Summary:

When Apache Directory Index is enabled, if you browse to a url that have no index file present, you will see list of all files. This is not good for securiy as hackers can see all files present in the directory.

Directory listing is generated by Apache module mod_autoindex, to disable this module:

a2dismod autoindex -f
systemctl restart apache2

If you don’t have root access, another way to disable directory index in Apache is to simply create a blank index.php or index.html file inside the directory: