Accessing the media folder from the browser - Problem?

The CMS Questions
1

Hi there,

I discovered quite by chance that the media folder on one of my websites is accessible from the browser.

look here: https://bzg-md.de/media/

On all my other websites going to …domain.de/media throws a 403 Forbidden. :thinking:

1.) Is this a (security-) problem?
2.) Did I do something wrong with the Kirby installation on this particular website, or is this behavior a server-side thing I can’t influence?

I would be extremely grateful for your opinion.

thanks, Matthias

2

It’s a server config issue. The same applies to your /assets folder, btw. Add this in your .htaccess or server config

```

Options -Indexes
```

3

what should I add? only this line?

Options -Indexes

1.) what does this line do?
2.) but on all the other websites I build, this was not necessary? why?

thanks for your help…

4

Yes, only that line, of course in addition to the existing stuff in the .htaccess. It prevents directory listings.

I don’t know

5

big thanks! you helped a lot! :slight_smile: