[tlug] Quick question about .htaccess and httpd.conf

[scott <scott@example.com>]

Hi everyone,

I recently noticed that after having installed roundcube webmail,
subdirectories (including the logs and conf files) were visible to the
outside world. Which is, of course, bad. First I tried to correct the
problem by sticking an .htaccess file in each sub-directory:

order allow,deny
 deny from all

but this wasn't working, files were still visible. As a stop-gap, I
edited the httpd.conf file and created <directory> files for every sub-
directory in the roundcube like this:

<Directory /foo/bar/>
AllowOverride none
Order deny,allow
deny from all
</Directory>

This did the trick. However I can't help but think there's got to be a
better way to allow only top-level access to a directory, then deny all
subdirectories. Anybody know if this can be done more efficiently than
the way I posted above?

I'm sure that soon after posting this question I'll stumble on the
solution, but I figured this might be of interest to other Tluggers as
well from a technical standpoint. 


Cheers,
Scott VanDusen