Just did a Google search for

[MrFlicks]

tvworlds.com/forum

and came across this page in second place

http://www.tvworlds.com/forum/Themes/default/images/

Is this a security problem and if so what do i do about it?

[Smith6612]

It's not really a security problem. If I were to search up my site on any well-known engine, it'd come up with stuff like that. All that is is a directory listing of the files.

[MrFlicks]

Ok Thing is though I once came across someone who does searches for these sort of pages in order to steal files and scripts etc from sites.

I spent a couple of hours one afternoon myself a couple of years back doing similar searches just to see what i could find and managed to access some rather sensitive files for some top US institutes and Gov departments that I would rather not go into too many details of here or anywhere else for that matter.

So is it not possible to stop pages like this appearing on the Search engines then?

[Smith6612]

It is possible... if you know how to write robots.txt files, or better yet, set your server so that users cannot see directory listings. All Apache servers have the ability to do that, so you shouldn't have a problem with doing that (if you know how to set it of course  .

[tumbleweed]

Just make all your main webroot folders with "no indexes" allowed.

tumble

[MrFlicks]

Thanks guys will have to see about getting that sorted out.

[tumbleweed]

If you do it correctly and have the right security on your server it should look like this when you click on the path.

I will use my forums path to the same folder as a example:

http://www.gotcanyons.net/gc/Themes/default/images/

tumble

[Harro]

Or just upload a blank index.html file
That works as well

[tumbleweed]

Or just upload a blank index.html file
That works as well

yepper that does the trick as well.

tumble

[msa027]

change the permission on your page to not allow it to be "read" except by you

[niko]

change the permission on your page to not allow it to be "read" except by you

Then any images can't be shown.

[Ricky.]

or simply place a blank index.html file there

[Dannii]

Add this to a file called robots.txt and put it in your root forum directory.

Code Select Expand

User-agent: *
Disallow: /Themes/