When I found this “insecurity” or (mis_configuration on the server side) that allows directory browsing
I tried several things to protect our contents, here they are:
One was to drop an empty index page on each directory I wanted to protect,
could be php or html, that itself blocks the listing of the directory.
then, later on I added some info on that “empty” page that reads like this:
<center><h1>You Are <span style=“color:red”>NOT </span> Authorized to acces this Area!</h1><br>
<h1>Usted <span style=“color:red”> NO </span>esta autorizado a acceder esta Area!</h1><br><br><hr>
<center><div class=“post”><h1>YOUR IP ADDRESS IS: <span style=“color:red”><?php echo $_SERVER[‘REMOTE_ADDR’]; ?></span></h1></center><br>
<h1><strong>And it has been logged!</h1></strong></h1></center><br><br>
As you can see is in english and spanish languajes, and displays the IP of the “visitors” of this area.
Is entirelly up to you if you want to log the IPs or not.
Other measure was to add a java script to disable mouse rigth click, so it makes difficult to copy your images.
Nabeel says, it annoys users, but helps. Also blocks seeing the page´s source_code.
But there exists other means to see the source code for the page.
Let´s keep phpvms “secure” and our contents too!
SK