Quote:
Originally Posted by ericgtr
Still, protecting it is a good idea. You can drop a simple blank index.htm in the root of your attachment fold and it won't be accessible. To do this create a blank .txt file and rename it to index.htm and upload it into the root of your attachment folder.
|
Based on how the files are stored (/attachments/u/s/e/r/i/d/ or /attachments/userid/) you can still see the directory listings knowing the userid of the person you want to see. (Since you don't have a index.htm file in every directory)
The way to make it so no one can see the listings is to just redirect people when they try to go there.
So just create a .htaccess file and put this in it:
Code:
Redirect permanent /forum/attached/ http://localhost/forum/
(Changing the URL accordingly)