Search code examples
httpwebtype-safety

is it possible to find hidden files on website?


If I'm hosting a website, say at http://www.example.com, how can I find files that are in the same folder as index.html if I DON'T know the filenames?

So for example, if there are these files in there:

http://www.example.com/test.txt
http://www.example.com/test1.txt

Can anyone see this list of files? If so, how can I hide them, but make each one accessible to someone who knows the names? I don't want to use a password system, if possible.


Solution

  • If you put index.html in that directory, so no files will be listed. If you allow to upload to that directory, so i can upload some php script to list all files in directory. IF you don't know file name, you can try to guess it :)