Articles in this section

See more

Content of the https://example.com/icons directory of website hosted in Plesk is always listed

Avatar
Leonid Gukhman
Updated
Follow
Plesk for Linux kb: technical ABT: Group B

Applicable to:

  • Plesk for Linux

Symptoms

  • Everyone can see the content of /var/www/icons/* directory by accessing the domain by URL https://example.com/icons/ or its IP: 203.0.113.2/icons/

  • Apache mod_autoindex is enabled:

    # apachectl -M | grep autoindex
    autoindex_module (shared)

Сause

This behavior is caused by Apache mod_autoindex, which comes enabled by default.

Resolution

Currently, it is not possible to manage mod_autoindex module via Plesk.

Vote for the ability to manage additional Apache modules in Plesk on User Voice portal. Top-ranked suggestions are likely to be implemented in future product version.

Disabling listing of the/icons/directory can be done in two ways:

Note: Following customization has not been tested and supported by Plesk. You should perform them on your own risk.

Disable mod_autoindex module completely

  1. Log in to the server via SSH.

  2. Disable module by running the following command:

    # mv /etc/httpd/conf.d/autoindex.conf /etc/httpd/conf.d/autoindex.conf.bak

  3. Restart Apache service:

    Centos/RHEL:

    # systemctl restart httpd

    Debian/Ubuntu:

    # systemctl restart apache2

Disable listing of /var/www/icons/* with mod_autoindex enabled

  1. Log into the server via SSH.

  2. Use any text editor to adjust the content of/etc/httpd/conf.d/autoindex.conf file:

    <Directory "/usr/share/httpd/icons">
    Options Indexes MultiViews FollowSymlinks
    AllowOverride None
    Require all granted
    </Directory>

    To:

    <Directory "/usr/share/httpd/icons">
    Options -Indexes +MultiViews +FollowSymlinks
    AllowOverride None
    Require all granted
    </Directory>

  3. Restart Apache service:

    Centos/RHEL:

    # systemctl restart httpd

    Debian/Ubuntu:

    # systemctl restart apache2

Additional information:

About mod_autoindex

Comments

2 comments

Sort by Date Votes
  • Avatar
    Stéphan Schamp

    Replace

    httpd -M | grep autoindex

    with

    apachectl -M | grep autoindex

     

    apachectl works on both CentOS and Debian and most likely Ubuntu as well.

    0
    Comment actions Permalink
  • Avatar
    Alexandr Redikultsev

    Hello, @Stéphan Schamp!

    Thank you for the input!

    I really appreciate your advice, and the article was updated accordingly.

    1
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request

Related articles