|Posted: Sun, 2010-08-22 02:52|
I discovered that any visitor can view all contents of Var and all subdirectories. Is that something I did wrong, something I was supposed to turn off during install. How best to correct without affecting G3?
What I've read is some host block listing by default, some don't. I'm with Site5 and they don't. Through Control Panel I can set the whole site, not directory by directory.
I found this option in .htaccess - seems to do the trick. I placed it in my G3 root and it protected all sub directories.
# Preventing Directory Listing