I wanted to setup a download directory using apache2. The user would click on a link and be taken to that directory where he would see an index listing of files that he could download. I was able to do this by adding the following to my apache config file:

<Directory "/var/www/localhost/htdocs/downfile">
Options Indexes
AllowOverride None
Order allow,deny
Allow from all
</Directory>

This works fine except for one problem, the user sees in the download index listing a link to the parent directory which he can click on. I don't want a user who enters this download directory to be able to browse into the parent directory. How can I change my configuration to prohibit the user from moving into the parent directory? Thanks.

If I get this correct..

you have something like
http://example.com/downfile/
that shows the directory listing.

if you make sure that there is an index.html file in the parent directory visitors won't be able to browse that directory.

the option Indexes only works when there is no index file in the directory.


but if you do it like http://example.com/downfile
people would be able to strip the /downfile and just look at http://example.com/

__________________
Pastebin
PHP Documentation Site
Allowee's Blog http://allowee.net