Hi,

I came across a potential security error whilst playing with the default install of Apach2 today.

If you goto http://domain or http://domain./ all is fine. Unfortunately, if you goto http://domain// or append any number of '/' to the uri, then you will be served with a directory listing instead of the index page.

I have fixed this localy by editiing /etc/apache2/sites-available/default . I have changed "RedirectMatch ^/$ /apache2-default/" to "RedirectMatch ^/*$ /apache2-default/"

I hope this is helpful, and apologise if I have sent this to the wrong address.

Regards

Keith Seldon

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to