Web SIte security - help please

[allan smith]

Dont know if this is the correct forum - if not my appologies

I run a website hosted by Namesco on a Linux/Unix server (dont know which - I just know it isnt Windows).

How do I stop people browing folders?

e.g. http://www.telfordsteamrailway.co.uk/images/

Is it one of the folder permissions settings? or do I need to include an 'index.html' page in the folder?

I have a 'robots' file in the root to stop spiders but what about the casual user?

Allan

[Vege]

put file named .htaccess inside the folder and add line
IndexIgnore *

into that file.

[allan smith]

just one line?

the .htacess I have seen are very complex

Allan

[Vege]

Try it and see if it's suites into your problem.

[nox-Hand]

You should try chmodding the folder, but not the files - set the folder to no user access, but the files to user execute - should do the trick, if the .htacces does not work, but that one should work, though..

[allan smith]

Forgive my caution - I know little of Unix/Linux.
I already have an .htaccess file in another folder, courtesy of the host
(not the folder I want to protect). My ftp prog - WS-FTP - does not show it in the file list, but I can 'GET' it.
How can I see this file in the list?
Because - if something goes wrong I need to see it in order to be able to delete it.

[Vege]

There should be option to "show hidden files" in WS-FTP.

[allan smith]

found it - sorted it
got the .htaccess working

many thanks

Allan