#1 WordPress forum plugin created by gVectors Team

wpForo – WordPress Forum Plugin
  • Home
  • Forum
  • Migrate to wpForo
  • Addons
  • Addons Demo
  • Documentation

Forum

Home | Forum

wpDiscuz - WordPress Comment Plugin
  • Forums
  • Members
  • Recent Posts
Forums
Main Support Forums
Bug Reports
Directory visible
 
Share:
Share
Tweet
Share
Notifications
Clear all

[Solved] Directory visible

Page 2 / 2 Prev
    Last Post
RSS

Anonymous20
Posts: 1602
 Anonymous20
April 6, 2020 12:41 am
(@anonymous20)
Noble Member
Joined: 6 years ago

There is no "i agree or disagree" i'm afraid.

I checked several other security issues of HIS site (a habbit of mine) and found also an other related one. So he has a problem.

The goal here is not to hide the problem of a wrong server or website security setup, but to point the problem to the user so he can ask for a fix to his hosting.

Hiding a problem is not good because this will come back in some other form, and the user will get here and blaim wpForo plugin or suggest that the problem is somehow related. And we do not want that.

It is like some people saying that if a warning/notice/error shows in debug of Wordpress, then just turn off the debug and we are all good.

Finally FYI all files and directories are by DEFAULT 644 & 755 and no index is set to all directories without the need to include that in .htaccess. That is IF a server or plan is correctly set.

 

CrisW
Posts: 281
 CrisW
April 6, 2020 3:55 am
(@crisw)
Reputable Member
Joined: 4 years ago

Hi @robert, @sofy, @martin, 

My apologies for my previous post, I got irked and felt berated. My own defenses kicked in. I mean no disrespect to this Community or the Staff and the Support Team.

So now going back to the issue reported in the Bug Report Forum, a question by @tomiradi, which is the real important matter here:

The following wpforo subfolders (and their corresponding subfolders) show the Index of the following:

wpf-admin
wpf-assets
wpf-includes
wpf-languages <- only this one has the blank index.php
wpf-themes

The OP, tomiradi, reported that the "folder displays". I checked my own installation and I saw it on mine too, so I made the above suggestion (to create an index.html file and upload it to the specific folders that don't have it.).

I don't know if this is by design, or a bug, since when I checked the wpforo website, the same index also displays here on the wpForo website as well (please see attached screenshot).

https://wpforo.com/wp-content/plugins/wpforo/wpf-assets/

If I may suggest, maybe on future updates, to add an index.php to these folders and subfolders, so that the folders do not display, as this would in effect, disable the directory listing.

I am suggesting this for the benefit of those of us who are not so high-tech as the other long time member projects here, making people like me and other newbies feel stupid because he goes out of his way to actually write condescendingly to others, whose technical knowledge he deems to be lower than his, without actually providing ANY actionable help.

A solution that helps one, can help many. But insulting someone who reports a bug, or berating someone who offers an actionable suggestion in the hope of fixing an issue, is out of place, especially in the absence of another much better actionable suggestion.  

People go here to request for assistance, we (members) shouldn't be afraid to do that in fear of being insulted by another member.

We were all once newbies at this. Mastering this forum plugin doesn't make any of us "experts", it just means we learned it sooner. And the newbies will learn it too, provided that others encourage and explain it to them in a non-judgmental way. 🙂

I hope you can enlighten us Robert, or Sofy, or Martin, on how to best proceed with the issue of these folders and subfolders displaying, in accordance to your own best practice, as you are the TRUE developers of this great Forum, you would know how to troubleshoot this best. 

I'm attaching the screenshot of the folders displaying, which also displays here at the wpForo website.  

https://wpforo.com/wp-content/plugins/wpforo/wpf-assets/

Thanks!  🙂 

 20200405_Index_Displays.jpg

I'm just a member here who used to be a newbie.

The case: When I actually put my keyboard where my forum is, and became #172. Can you imagine if you had to build this forum yourself? How kind and patient will you be? The best way to say thank you is say it, write it, and then head on over at Wordpress plugin page and rate wpForo 5 stars - by clicking here.

Anonymous20
Posts: 1602
 Anonymous20
April 6, 2020 4:06 am
(@anonymous20)
Noble Member
Joined: 6 years ago

This is what i get in all my installations without any changes in my htaccess (no index or whatever).

But here also in this site, i can see files and directories and also VIEW files (js or png etc) as the above poster says (along with some drama).

 

 

 2020-04-06-07_03_44-403-Forbidden.png
Robert
Posts: 9090
Robert - Twitter
 Robert
Admin
April 6, 2020 7:34 am
(@robert)
Support Team
Joined: 6 years ago
Posted by: @anonymous20

Because your hosting company (or anyone else who did the server setup) didn't set this correctly.

Edit your .htaccess and add line:

Options -Indexes

This has nothing to do with wpForo or even Wordpress.

Hi @anonymous20,

Thank you for your help indeed, you know that we really appreciate it, you've helped lots of wpForo members since the community is opened, but I have to ask you again to be tolerant to other users suggestions and helps. You should only care about your suggestions and don't do sharp comments on other members posts. You can report any post you think is incorrect, but please don't force your opinion to other members.

There is nothing so dangerous here for sure. This is an alternative solution that is used very often by software developers and website administrators. On the other hand all solutions are not 100% safe in case a pro hacker decided to hack your website.

@tomiradi, you can use which solution you want, both are correct:

by @crisw: https://wpforo.com/community/general-forums-bug-reports/directory-visible/#post-39222

by @anonymous20: https://www.netsparker.com/blog/web-security/disable-directory-listing-web-servers/

 

Thank you for your understanding. The topic is closed.

In case you want to say thank you !)
We'd really appreciate and be thankful if you leave a good review on plugin page. This is the best way to say thank you to this project and support team.

CrisW liked
Page 2 / 2 Prev
  All forum topics
  Previous Topic
Next Topic  

Forum Search

Join Us!

Download wpForo plugin
on WordPress.org

wpForo Addons

wpforo-private-messages wpforo-advanced-attachments-128x128 wpforo-embeds-128x128 wpForo User Custom Fields addon wpForo – Blog Cross Posting addon wpForo Ads Manager wpForo – WooCommerce Memberships Integration wpForo Emoticons wpForo – Tenor GIFs Integration
View all Addons »

Recent Topics

  • How to make new user to get approve manually before creating post and profile.

    By Adhyansh21, 21 hours ago

  • Posts deleted in database still show up on front-end

    By nylex, 23 hours ago

  • Not all links are automatically added with the "nofollow" attribute

    By st7878, 1 day ago

  • Editors assign users to groups

    By mike_netinfo, 1 day ago

  • Set password link opens forum login page instead of set password page

    By JanJan, 1 day ago

  • User banned for using icons?

    By JanJan, 1 day ago

Topic Tags

  • css52
  • translation50
  • plugin conflict48
  • seo47
  • new features45
  • buddypress43
  • avatar41
  • moderation40
  • ultimate member40
  • login40
  • forum40
  • registration37
  • threaded layout35
  • cache34
  • spam33
  • editor33
  • menu33
  • shortcode32
  • forum accesses30
  • widget29
View all tags (2192)

Recent Posts

  • RE: User banned for using icons?

    @janjan, yes.

    By Chris, 30 mins ago

  • RE: recover deleted forum categories

    Forums do not dissapear just like that, without a reaso...

    By dimalifragis, 37 mins ago

  • RE: recover deleted forum categories

    Hi @asmadi1, Contact your hosting to get a backup.

    By Chris, 46 mins ago

  • RE: Posts deleted in database still show up on front-end

    @nylex, Copy the post content or part of it, the go-t...

    By Chris, 2 hours ago

  • RE: Problem with Block themes

    Works very well with those kind of themes. Here is MY...

    By dimalifragis, 3 hours ago

  • RE:

    By Anonymous, 53 years ago

  • RE: Not all links are automatically added with the "nofollow" attribute

    I have no idea, i guess not.

    By dimalifragis, 14 hours ago

Share:
Share
Tweet
Share
  Forum Statistics
21 Forums
9,934 Topics
50.2 K Posts
12 Online
48.1 K Members

Latest Post: User banned for using icons? Our newest member: Is Adhd Medicine Proper For Yo... Recent Posts Unread Posts Tags

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed

Powered by wpForo | Copyright © 2016-2022 gVectors Team
Copyright Registration Service - Click here for more information or to register work
wpForo is Registered with the IP Rights Office
Copyright Registration Service

Ref: 4477265538
  • Home
  • Forum
  • Migrate to wpForo
  • Addons
  • Addons Demo
  • Documentation