0

How do you fix a directory traversal issue? Disable directory listing in Apache or IIS configuration Search replace ../ from the parameter Add a blank index.html file in the webroot Carry out input validation or use database tokens for files

Himanshu
  • 13
  • 6

1 Answers1

0

For Apache, I think placing the option Options -Indexes to the .htaccess file. See http://www.thesitewizard.com/apache/prevent-directory-listing-htaccess.shtml and http://www.cyberciti.biz/faq/apache-web-server-prevent-directory-folder-listing/

froeser
  • 61
  • 5