Security Check n°15 / 120

Directory listing disabled

When directory listing is enabled on the web server, accessing a folder like /uploads/ shows a list of all files it contains (like a file ex…

Analyse my site for free
← All checks

How TheSiteFuse checks "Directory listing disabled"

When directory listing is enabled on the web server, accessing a folder like /uploads/ shows a list of all files it contains (like a file explorer). This is useful in development but disastrous in production.

Real-world impact of "Directory listing disabled"

A listable directory exposes all user-uploaded files, internal documents, backups, and sometimes configuration data. Attackers systematically scan /uploads/, /images/ and /files/ looking for exposed data.

Does your site pass this check?

Run the free full audit (120 checks) and instantly discover what needs fixing.

Continue with Google
or