Hi All,
While checking the stats for one of my websites, I was surprised to see
that my Resources folder had been looked into 3 times. I’ve never seen
this before. Should I be concerned?
Thanks,
Richard
Richard Houston
Architectural Art
http://www.richardhoustonart.com
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
Hmm - let me say it that way:
Ctrl-click (Chrome e.g.) and check elements lets you access each single page of the world from the code and resources view.
It’s one of the basic tools those use, if there are any questions regarding code-issues, missing images request or else to help and one of my first thing I do, to find out how things are running together.
Assumed that this ctrl-click is stored somewhere in your history or log-files, I wouldn’t mind about that too much - cause in fact you can’t avoid or restrict it (as far as I know).
The other explanation for this could probably be a crawler issue. If you a are concerned about this, think about a robots.txt where you can despictable and evil robots to keep out :).
Cheers
Thomas
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
On Oct 21, 2011, at 12:36 AM, Thomas Kimmich wrote:
Assumed that this ctrl-click is stored somewhere in your history or
log-files, I wouldn’t mind about that too much - cause in fact you
can’t avoid or restrict it (as far as I know).
Thomas, thanks for the quick reply. I’m surprised that the entire
contents of my Resources folder can be accessed just by adding
“Resources” to the end of my URL. Even more surprising is that I
haven’t been able to do that with any other website I’ve tried. In most
cases, I get a 404 page. Maybe this is no big deal, but I can’t help
wondering why everyone else seems to have taken some sort of action
(however they did it) to prevent access to their Resources folder.
Richard
Richard Houston
Architectural Art
http://www.richardhoustonart.com
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
I’m surprised that the entire contents of my Resources folder can be accessed just by adding “Resources” to the end of my URL.
If you toss a blank index.html file in the Resources folder it will prevent a listing of the content.
Of course anyone can still navigate to a specific resource if they know the name or they can look at your stylesheet and find what they want.
Todd
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
On Oct 21, 2011, at 9:08 AM, Todd wrote:
If you toss a blank index.html file in the Resources folder it will
prevent a listing of the content.
Thanks Todd, that’s exactly what I’m looking for. Sorry to seem
uneducated, but how exactly do I do this?
Richard
Richard Houston
Architectural Art
http://www.richardhoustonart.com
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
Thanks Todd, that’s exactly what I’m looking for. Sorry to seem uneducated, but how exactly do I do this?
Normally I would say just use a text editor to create index.html and use Transmit, Cyberduck, etc. to upload it to your Resources folder. However, since this is FW you will probably have to use the Remote Resources action (or similar) so FW is aware of it. I’m sorry I can’t give a step-by-step but it’s been a long time since I’ve used FW, but I’m sure someone can chip in.
Todd
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
Just load your site folder (on your server) with Transmit or CyberDuck or anything. Create a plain text file named index.html. You don’t have to put anything at all in that file, it just has to exist and be named precisely that. Now use your FTP application of choice to place that file inside your Resources folder(s). Freeway will not do anything to the file on your server – it didn’t create it so it won’t touch it). You only have to do this once, unless you create a new folder in your Freeway document, then you’ll need to do this once again for that new Resources folder inside the new folder.
But even easier and probably a better idea is to create (or edit any existing) .htaccess file in the top-level folder of your Web server. Add this line:
Options -Indexes
That’s all you really need. This forces any folder that does not contain an index.html file to return an error instead of a friendly listing of its contents.
Walter
On Oct 21, 2011, at 12:33 PM, Todd wrote:
Thanks Todd, that’s exactly what I’m looking for. Sorry to seem uneducated, but how exactly do I do this?
Normally I would say just use a text editor to create index.html and use Transmit, Cyberduck, etc. to upload it to your Resources folder. However, since this is FW you will probably have to use the Remote Resources action (or similar) so FW is aware of it. I’m sorry I can’t give a step-by-step but it’s been a long time since I’ve used FW, but I’m sure someone can chip in.
Todd
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
Maybe someone (clever) can write a quick Action to put an index.html file in there with a redirect to the root index file?
Peter Tucker, Oxford UK - but mobile somewhere
On 21 Oct 2011, at 17:16, Richard Houston email@hidden wrote:
On Oct 21, 2011, at 9:08 AM, Todd wrote:
If you toss a blank index.html file in the Resources folder it will prevent a listing of the content.
Thanks Todd, that’s exactly what I’m looking for. Sorry to seem uneducated, but how exactly do I do this?
Richard
Richard Houston
Architectural Art
http://www.richardhoustonart.com
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
That’s one of the many features in the Image Guardian Action; 
http://www.freewayactions.com/product.php?id=006
—snip—
Protect Image Directory creates and inserts a small ‘index’ file into the same directory as the current image (normally called ‘Resource’ or ‘Resources’) to prevent users from simply directing their browser to this location and getting a full list of the images used in the site.
Although this can also be done by setting the permissions on this folder to prevent directory listings inserting an index file in this fashion is just as effective and a lot quicker.
—snip—
Alternatively use the Upload Stuff or Upload Extra Resources Action and upload your empty index.html file (as Walter suggests) into the current Resources folder.
Regards,
Tim.
On 21 Oct 2011, at 18:26, Peter Tucker wrote:
Maybe someone (clever) can write a quick Action to put an index.html file in there with a redirect to the root index file?
FreewayActions.com - Freeware and commercial actions for Freeway Express & Pro.
…
Protect your mailto links from being harvested by spambots with Anti Spam.
Only available at FreewayActions.com
…
http://www.freewayactions.com
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
On Oct 21, 2011, at 10:00 AM, Walter Lee Davis wrote:
Create a plain text file named index.html.
I guess it’s the really simple things that stump me. I’ve created a
blank page in TextEdit titled “index.html” (without the quotes). Now
when I Save it, do I append the txt extension? Or, am I going about
this the wrong way?
Thanks,
Richard
Richard Houston
Architectural Art
http://www.richardhoustonart.com
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
Create a plain text file named index.html. … place that file inside
your Resources folder(s).
I must be doing something wrong. I created a blank index.html file in
TextWrangler, and then uploaded it to my Resources folder using my web
host control panel File Manager. It’s in there, but when I visit my
website, I can still add “/Resources” to my URL, and it dutifully
presents an entire list of everything in the folder. Any idea why this
isn’t working?
But even easier and probably a better idea is to create (or edit any
existing) .htaccess file in the top-level folder of your Web server.
Add this line:Options -Indexes
I don’t have a .htaccess file at the top-level folder of my web host’s
server, but there is one in the Resources folder. Will that work?
Thanks again!
Richard
Richard Houston
Architectural Art
http://www.richardhoustonart.com
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
If you’re using TextEdit, Pull down Format / Plain Text. Then save the file as index.html. If your Mac is set to hide filename extensions, then you may discover that TE has saved a file named index.html.txt. You’ll see this when you upload to your server using Transmit or another FTP application. If it did, simply change the file extension once you upload it to your server.
Walter
On Oct 21, 2011, at 2:33 PM, Richard Houston wrote:
On Oct 21, 2011, at 10:00 AM, Walter Lee Davis wrote:
Create a plain text file named index.html.
I guess it’s the really simple things that stump me. I’ve created a blank page in TextEdit titled “index.html” (without the quotes). Now when I Save it, do I append the txt extension? Or, am I going about this the wrong way?
Thanks,
Richard
Richard Houston
Architectural Art
http://www.richardhoustonart.com
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
On Oct 21, 2011, at 3:23 PM, Richard Houston wrote:
Create a plain text file named index.html. … place that file inside your Resources folder(s).
I must be doing something wrong. I created a blank index.html file in TextWrangler, and then uploaded it to my Resources folder using my web host control panel File Manager. It’s in there, but when I visit my website, I can still add “/Resources” to my URL, and it dutifully presents an entire list of everything in the folder. Any idea why this isn’t working?
Two possible reasons: you’re on a non-standard server, and the index file is index.htm or default.htm or something besides index.html.
Or possibly you’re seeing cached results. The index file is often cached by your server for quite a while. Try adding ?123 to the end of the URL and reload.
But even easier and probably a better idea is to create (or edit any existing) .htaccess file in the top-level folder of your Web server. Add this line:
Options -Indexes
I don’t have a .htaccess file at the top-level folder of my web host’s server, but there is one in the Resources folder. Will that work?
That’s possibly why you’re seeing the index behavior. Double-click on that file so it opens in a text editor on your Mac. Paste the contents here or (better) at http://Pastie.org or https://gist.github.com so we can see what’s being directed to happen in that folder.
Walter
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
I actually tried to add the resources to my url and I got the message 403 Forbidden message. The 404 is the not found one (remember not all pages are built in Freeway using the word “Resources” for the image folder.
It might be in fact a point of host?
Cheers
Thomas
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
It might be in fact a point of host?
Maybe so.
FWIW I checked all my sites and none revealed a file list - and I’ve done nothing to “hide” them specifically.
All I get is -
Directory has no index file.
Browsing this site or directory without an index file is prohibited.
If you are the site’s webmaster, you can remedy this problem by creating a default HTML page with one of the following names:
index.html
index.htm
default.htm
Default.htm
home.html
Home.chtml
NOTE: Filenames are case sensitive, i.e., Home.html is not the same as home.html
Arguably, if someone wants to steal your stuff they will find a way to do it…I’ve even had clients steal images with screen shots! Programs like “Site Sucker” are also built to extract everything from websites… at least all they can make sense of.
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
Two possible reasons: you’re on a non-standard server, and the index
file is index.htm or default.htm or something besides index.html.
I noticed the Public folder is marked html, and the server operating
system is Linux, if that info is of any help.
Or possibly you’re seeing cached results. The index file is often
cached by your server for quite a while. Try adding ?123 to the end of
the URL and reload.
I added “/?123” at the end of my URL, and nothing changed. I assume the
slash is necessary.
Double-click on that file so it opens in a text editor on your Mac.
Paste the contents here … so we can see what’s being directed to
happen in that folder.
The .htaccess file (in my Resources folder) is empty. Sorry I don’t
have more useful info to offer. Any other ideas?
Thanks,
Richard
Richard Houston
Architectural Art
http://www.richardhoustonart.com
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options
I finally got this fixed. I contacted my web host, and they added a
.htaccess file to my Resources folder with the command Options -
Indexes (as Walter suggested), and it all works fine now.
Thank you to all who responded!
Richard
Richard Houston
Architectural Art
http://www.richardhoustonart.com
freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options