I have discovered that the best way to keep people from looking into higher
directories is to create an index page for those directories. In fact, on
websites I develope, every directory has an index page. The directories into
which I do not wish people to look I create one similar to this:
-
Rule #1 - don't post configuration or use questions to the tomcat-dev list...that's
what tomcat-user is for.
That said, look at ./conf/web.xml for the 'listings' init-param of DefaultServlet.
Setting this parameter to 'false' will deny directory listings.
-chris
> -Original Message-
>
Hi Luo,
You can create an index.jsp or index.html page in that directory and
people will no longer be able to list the directory contents.
- MArk
Luo, Zhongjun wrote:
Dear Sir/Madam:
I have used Tomcat to make a web site, please see:
http://bac-portal.mc.vanderbilt.edu/BAC/BACWEB.jsp
Would yo
