Thread

I’ve recently migrated a site and noticed that I can access all of my directories within my image folder. I’m aware that I can place a index.html in all of my file upload locations and have done so, but this is more for my clients. If they create a new file upload location they will not be aware of this potential security issue.

My question is this. On other sites that I have running ExpressionEngine I have no need to do this and accessing the file upload locations is not possible from the url, how is this done?

Hi adrake9,

It sounds like you want to prevent web visitors from viewing the directories within your images folder whether or not there’s an index.html file in the directory in question, right? In that case, I’d recommend you set up an .htaccess file along the lines of the suggestion in this article.

Does that help?