Multiple choice technology security

How to stop forceful browsing?

  1. Check authorization on each page

  2. Name files with un-guessable names

  3. Place all accessible files in the same directory

  4. ACL's on the web root
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Forceful browsing (or directory traversal) attacks are prevented by checking authorization on every page request. Obscure file names or directory structure are security through obscurity and not real protection - authorization checks are mandatory.

Keep practicing — related questions