Hide Your Folders and Directories!

As a follow up to this post, you should also hide your directories. People have no business browsing the contents of your server using their browser.

The fix is quite simple for Apache:

1. sudo nano /etc/apache2/apache2.conf
2. Look for:
   <Directory /var/www/>
Options Indexes FollowSymLinks
3. Then change it to:
   <Directory /var/www/>
Options -Indexes +FollowSymLinks
4. sudo service apache2 restart
5. Check your subfolders if you can browse them via the browser (you shouldn’t be able to)

Source: Vultr