title: "Index of ..." directory listing protection
body: <p>all!</p>
  
  <p>On our server we have got a directory 'files' with materials for students and teachers:</p>
  
  <pre><code>http://sample.ru/files/4students/
  http://sample.ru/files/4teacherszzz/
  http://sample.ru/files/markszzz/
  ...
  </code></pre>
  
  <p>Each directory, when you type it into your web-browser shows you 'Index of /files/4students/' page with list of files/subdirs. </p>
  
  <p>But, we've got problem: when the student types 'http://sample.ru/files/' he can see all other folders! But students must not see teachers files (in folders 4teacherzzz and markszzz).</p>
  
  <p>So, we've put blank index.html into /files/ . And by typing this url, student can't see other folders.</p>
  
  <p>Now, this is question: can anyone student (he only knows 'http://sample.ru /files/4students/' url) get list of urls in 'http://sample.ru /files/' (may be by special typing '/files/4students/../' or so on)? and how? and how to deny this?</p>
  
  <p>The problem is that we must leave that folders system --- it is more convenient for teachers (they only copy files to a folder on server and files automatically appears in "Index of ..." page)</p>
  
  <p>Thanks for your replies!</p>