You should definitely alter the default Apache config file to ensure the -Indexes flag is in all virtual hosts and in a global setting as well. No one needs his website to happily list all server files to the public when there is no index page, please.
|