By Tito A. on

The entirety of every file on the web.

Including

    Parent Directory
    README.txt
    admin_menu/
    aggregator/
    block/
    blog/
    blogapi/
    book/
    color/
    comment/
    contact/
    dblog/
    filter/
    forum/
    help/
    locale/
    menu/
    node/
    openid/
    path/
    php/
    ping/
    poll/
    profile/
    search/
    statistics/
    syslog/
    system/
    taxonomy/
    throttle/
    tracker/
    translation/
    trigger/
    update/
    upload/
    user/

I am not sure how this came to be.
But every single file is up for viewing on the web.
I am certain this should not be set up in this manner.

However I have know idea where it went wrong.

Most importantly- HOW DO I FIX THIS?

Thank you all for your help.

⋅ Categories: Drupal 6.x

Comments

avskip’s picture

avskip commented

I would start by making sure the .htaccess file is the original file. That's a lot of what limits access. Beyond that you need to look at what permissions are on each area. I don't recall what they should be right now, but I'm sure it's somewhere on here.

Those files should be inaccessible for viewing from the web.

A good place to peruse might be the Drupal Troubleshooter (thought I'm uncertain if it covers this):
http://drupal.org/node/72108

Hope that's at least some help.

Skip

Tito A.’s picture

Tito A. commented

Where do I locate it?

avskip’s picture

avskip commented

The .htaccess file is included in the Drupal distribution file and should be in the root of the Drupal install. On my system it's a hidden file. I use the SSH editor to access/edit it, but all I do is add to it addresses to block. The security for the basic system is in the file already so you shouldn't have to mess with that.

vm’s picture

vm commented

Something seems very wrong here.

The core modules should be inside the modules folder.
The contrib modules should be in sites/all/modules

the fact that they are all in what seems like the root of your installation or outside the root seems odd based on your outline of folder structure.

You should redownload a drupal tar.gz archive and compare the folder structure in the .tar.gz with your installation.

How the folders would have magically moved is another issue entirely.

avskip’s picture

avskip commented

What is being shown seems to be a standard Drupal 6 modules directory listing with the exceptions of README.txt and the admin_menu/ subdir.

What I'm not understanding is if this is their root dir or just all of their module subdir is visible from the web.