Script Tool against directory traversal security vulnerability

Description

Short description

The tool against directory traversal (observing) security vulnerability. It recursively adds a index.php file in all given directories.

How to use

Run from a console:

php index.php (--add or --remove) (The directory path for recursively adding or removing the index.php) [The template path for adding the index.php file]

Example #1: adding new index.php files without overwrite existing one.

php index.php --add ../../.. ./templates/redirect-to-previous-directory.php

Example #2: cleaning a directory of old index.php files.

php index.php --remove ../../..

Available templates for index.php

These are templates for popular methods to prevent directory traversal:

• The template error-404.php is used to show error 404 - a page not found.
• The template redirect-to-previous-directory.php is used to do the redirect to a previous directory.

Installation

Just download the archive and use the tool by described instruction.

You can also use this tool in your project by adding the dependency directly to your composer.json file:

"repositories": [
  {
    "type": "vcs",
    "url": "https://github.com/zapalm/auto-indexer"
  }
],
"require": {
  "php": ">=5.3",
  "zapalm/auto-indexer": "dev-master"
}

Data sheet

• Version: 1.0.1 (2019-09-23)
• License: Open source license
• Product type: Script