1

I have noted that in default Magento .htaccess the /errors/ folder is accessible and open it in a browser list the content of the folder.

How to address it ?
Add Options -Indexes to the main .htaccess is safe ?

2

The errors folder should not be accessible. See an example here. Most probably you are missing something in the .htaccess file. Try to get one from the fresh Magento copy.
Also make sure that you have this .htaccess file inside the errors folder.

<FilesMatch "\.(xml|phtml)$">
    Deny from all
</FilesMatch>
  • error dir list in my local – MeenakshiSundaram R May 19 '14 at 11:18
  • I commented out the <FilesMatch "\.(xml|phtml)$"> and </FilesMatch> to prevent the access to errors folder and we are on Litespeed. It doesn't break anything with the error pages. – Haijerome Jul 8 '14 at 15:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.