Understanding Apache rules in <Directory> directive
Solution 1:
Options Indexes FollowSymLinks MultiViews
Indexes: if you try to access a directory that doesn't have a DirectoryIndex, such as index.php
, the content of the directory will be shown.
FollowSymLinks: allows apache to use symbolic links. This can improve the perfomance but can be a security issue too.
MultiViews: not sure about it but, from googling a bit it looks like a security risk. Some info
AllowOverride All
Allow .htaccess
files to override every configuration parameter set in apache2.conf
Order allow,deny
By default, access to a directory is forbidden.
Allow from all
Allow connections from any network.