Weird to be talking about it without having it actually posted:
"It appears that under some circumstances, Apache will serve a
directory listing even if there is an index.html (or other valid
"index document") in the directory. This is triggered by a request
for:
http://www.example.com/?M=A
Solution:
Turning off indexing in the httpd.conf file will keep Apache from
doing this. There is no real reason not to turn off indexing as a
global option if you have an index.html file in every directory."
Note: I tried this on one of my sites that doesn't have indexing
turned off, and it didn't work.
--
Carrie Bartkowiak, [EMAIL PROTECTED] on 07/16/2001
_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security
