Website File directory listing access

[DiGiT]

OK, so I have set up a couple directorys directly off the root of my domain.

example: www.domain.com/files and www.domain.com/morefiles

I have a link to the /files directory from my website page, but I dont have one for the /morefiles page

I did this because I put a temp file on the morefiles dir for a friend so he has easy access without a password to get it. I was just wondering if other visitors knowing that the /files dir is there, if they could somehow see other directories aswell, whether they can access them or not isnt my question, but can they, and if so, how can they see something like a sitemap of my site and its dir's.

Go to my site if you want if it helps you answer my question.

BTW the extra dir is not /morefiles
I named it something else, but it isn't a sensitive file, so if you find the directory, and or file, let me know how. I just want to know how easy it is for others to get to. I dont want it to be easy, but like I said, it is the only way to make it easy for my friend aswell.

Thanks in advance if anyone can help me.

[whatnow]

what?

if u wanna stop ppl from browsing files in directories just stick aindex page in there with a warning message or a redirect.

if u wanna give a friend access to a webspace just give him a link for a ftp login?

ftp://myfriend:theirpassword@ftp.domain.com/whereweshareourporn


i didnt fully understand ur question

[blaggard]

FTP would be the best option, It's what I always do and I'm def not alone. I have a few accts set up for friends and family. If you really must use http just disguise the link, anyone can spot a "mouseover" though.

I love the "tunnel" wmv BTW!

[DiGiT]

ya, that tunnel thing is crazy. um I understand the mousover thing. I didnt even put a hidden link for my friend, I emailed it to him. My question was, is there a way to list or view all the directories that are open access, without knowing the specific directory name. And this is assuming that no one typing in timetogonutz/xxxxx where xxxxx would be bruteforce attack. Is there a simple way in the browser or with ftp program for people to view open access dir's on the domain if no password is needed.

And as for the ftp, like I said in the first post.. my friend screws up the password all the time, so this is the easiest. And it isnt permanent, I am wondering for future reference.

[blaggard]

Heading out the door so brief but if you post him a link to the ftp (as in the post by whatnpw) surely he can click it in the email?
l8rz

[DiGiT]

I didnt realize what he wrote... now I understand.. Im gonna go give it a try.. this is also on windows server.

[whatnow]

ftp will work fine, if he's a bit simple then send a tinyurl instead so then he really has no idea.

failing that, if u use passwords, just make it your name, so how can he forget that the password is Dave?

[DiGiT]

for some reason, since I switched my server over from linux to windows, I dont have the option to set up a directory with ftp access with independant username and passwords. Would this be done with asp.net or frontpage extensions or something ... I looked everywhere on my godaddy setings, and it seems that I only had that control under linux