{"id":1375,"date":"2026-10-19T09:59:05","date_gmt":"2026-10-19T09:59:05","guid":{"rendered":"https:\/\/www.freethought.uk\/help\/?p=1375"},"modified":"2026-10-19T09:59:07","modified_gmt":"2026-10-19T09:59:07","slug":"how-to-disable-directory-indexing-and-prevent-file-browsing","status":"publish","type":"post","link":"https:\/\/www.freethought.uk\/help\/how-to-disable-directory-indexing-and-prevent-file-browsing\/","title":{"rendered":"How to Disable Directory Indexing and Prevent File Browsing"},"content":{"rendered":"\n

When a website folder lacks an index file (such as index.php<\/code> or index.html<\/code>), web servers often display a full list of all files in that directory. Known as directory indexing or directory browsing, this allows visitors to browse raw uploads, plugin files, or site assets, posing privacy and security risks.<\/p>\n\n\n\n

Disabling directory indexing ensures visitors see a 403 Forbidden<\/strong> page instead of a list of your files. You can configure this using cPanel, Plesk, or your .htaccess<\/code> file.<\/p>\n\n\n\n

Method 1: Using .htaccess<\/code> (Recommended)<\/h3>\n\n\n\n

Editing your .htaccess<\/code> file applies rules directly to the web server and works on both cPanel and Linux-based web hosting environments.<\/p>\n\n\n\n

    \n
  1. Log into your hosting control panel and open File Manager<\/strong>.<\/li>\n\n\n\n
  2. Navigate to your website’s root directory (typically public_html<\/code>).<\/li>\n\n\n\n
  3. Ensure hidden files are visible (in cPanel File Manager, click Settings<\/strong> at the top right and check Show Hidden Files (dotfiles)<\/strong>).<\/li>\n\n\n\n
  4. Edit the .htaccess<\/code> file (or create one if it does not exist).<\/li>\n\n\n\n
  5. Add the following line at the top of the file:
    Options -Indexes<\/code><\/li>\n\n\n\n
  6. Click Save Changes<\/strong>.<\/li>\n<\/ol>\n\n\n\n

    Method 2: Using the “Indexes” Feature in cPanel<\/h3>\n\n\n\n

    If you prefer a graphical menu without editing code directly, cPanel offers a built-in Index Manager tool:<\/p>\n\n\n\n

    Step<\/strong><\/td>Action<\/strong><\/td><\/tr><\/thead>
    1. Open Indexes<\/strong><\/td>Log into cPanel, scroll to the Advanced<\/strong> section, and click Indexes<\/strong>.<\/td><\/tr>
    2. Select Directory<\/strong><\/td>Click through the file tree to locate the directory you want to secure.<\/td><\/tr>
    3. Edit Settings<\/strong><\/td>Click Edit<\/strong> next to the target folder.<\/td><\/tr>
    4. Disable Indexing<\/strong><\/td>Select No Indexing<\/strong> (or Inherit<\/em> if the parent folder is already set to No Indexing).<\/td><\/tr>
    5. Save<\/strong><\/td>Click Save<\/strong>.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    Method 3: Disabling Directory Browsing in Plesk<\/h3>\n\n\n\n

    You can disable file listings in Plesk either through domain server settings or directly via the File Manager.<\/p>\n\n\n\n

    Option A: Via Apache & nginx Settings<\/h4>\n\n\n\n
      \n
    1. Log into Plesk and select your domain.<\/li>\n\n\n\n
    2. Go to the Hosting & DNS<\/strong> tab and click Apache & nginx Settings<\/strong>.<\/li>\n\n\n\n
    3. Scroll down to Additional Apache directives<\/strong>.<\/li>\n\n\n\n
    4. In the text boxes for both Additional directives for HTTP<\/strong> and Additional directives for HTTPS<\/strong>, add:
      Options -Indexes<\/code><\/li>\n\n\n\n
    5. Click OK<\/strong> to save changes.<\/li>\n<\/ol>\n\n\n\n

      Option B: Via Plesk File Manager<\/h4>\n\n\n\n
        \n
      1. Go to Files & Databases<\/strong> > Files<\/strong> and open your httpdocs<\/code> or public_html<\/code> folder.<\/li>\n\n\n\n
      2. Edit your .htaccess<\/code> file (create one if it does not exist).<\/li>\n\n\n\n
      3. Add Options -Indexes<\/code> to the top of the file and click Save<\/strong>.<\/li>\n<\/ol>\n\n\n\n

        Testing Your Changes<\/h3>\n\n\n\n

        To confirm directory indexing is successfully disabled, open a browser window and visit a subfolder on your website that does not contain an index file (for example, https:\/\/yourdomain.co.uk\/wp-content\/uploads\/<\/code>).<\/p>\n\n\n\n

        If configured correctly, the browser should display a 403 Forbidden<\/strong> error page rather than a list of files.<\/p>\n\n\n\n

        If you’re still experiencing issues after following the steps above, please contact our support team and we’ll be happy to help.<\/p>\n\n\n\n

        <\/p>\n\n\n\n

        <\/p>\n\n\n\n

        <\/p>\n\n\n\n

        <\/p>\n","protected":false},"excerpt":{"rendered":"

        When a website folder lacks an index file (such as index.php or index.html), web servers often display a full list of all files in that directory. Known as directory indexing or directory browsing, this allows visitors to browse raw uploads, plugin files, or site assets, posing privacy and security risks.…<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17,3,25,16],"tags":[],"class_list":["post-1375","post","type-post","status-publish","format-standard","hentry","category-advanced-techniques","category-cpanel","category-plesk","category-security"],"_links":{"self":[{"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/posts\/1375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/comments?post=1375"}],"version-history":[{"count":1,"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/posts\/1375\/revisions"}],"predecessor-version":[{"id":1376,"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/posts\/1375\/revisions\/1376"}],"wp:attachment":[{"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/media?parent=1375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/categories?post=1375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freethought.uk\/help\/wp-json\/wp\/v2\/tags?post=1375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}