XF 2.0 How to disable index listing

[Muchacha]

How to understand whether index listing is enables and if yes, how to disable it? Why is it enabled in first place, what are pros and cons?

 

[djbaxter]

Honestly, I have no idea what you're asking. What do you mean by "index listing"?

 

[Muchacha]

Thank you, Djbaxter, Well, I don't understand either so I wanted to know whether it is a thing.
We received some critical comments from some security guy that out forum is not sufficiently secure. He refuses to explain further.

He said :
Index listing is enabled and ought to be disabled to prevent
information leakage
Directory listing is easy to disable under LiteSpeed. It's a
security issue. Why easily provide information to an attacker?

Is this related to user profiles being visible and users being contactable by non users from outsite via Xenforo?

LiteSpeed I understand is a faster alternative to Apache

 

[djbaxter]

Okay. This is not a Xenforo issue. It's a server issue. He is telling you that anyone coming to your site should not be able to view lists of files in your directories.

Probably best to ask your host to do this for you. Otherwise, you can do this with cPanel depending on the version you have or using .htaccess files in the root directory for your site:

Put this Options All -Indexes at the top of your .htaccess file.

You can actually do this for each directory below the root as well.

 

[Muchacha]

Thank you so much. I will start with that, maybe I will have further questions later.