Re: protecting web directories in apache2

[fra-du@tourde.org (François TOURDE)]

Le 15671ième jour après Epoch,
Zachary Uram écrivait:

> Running Apache2 on Debian testing release. Say I have a directory
> http://www.website.org/files/
> And I want to let a user download a file:
> http://www.website.org/files/example.txt
> But I don't want them to be able to browse the directory and see the
> other files in there.
> So how can I protect the directory?

Maybe you can use Linux File System rights:

  chmod a=x files

and give the complete path to the user. Not sure Apache will accept, but
on a non-readable dir, you can access files if the dir is 'x'
(i.e. traversal)

Not tested.

HTH