Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a few folders in which i did not have any index.htm or index.php and i dont want to have one so that i can see all the html files in that. I dont have other extensions other than .htm in those folders.

What will be the security risk in having directory listing enabled?

share|improve this question
add comment

1 Answer

up vote 3 down vote accepted

The security risk is such that users can see whats in that directory and if that directory has other directories below it.

Some PCI security scanners will detect directory indexing as a security issue because malicious users could potentially work out what file structure you are using, which system and even sometimes which web script if you use one and use that info to launch an attack - this risk is generally classified as low though

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.