my q2a page displays php files

Question

when I go to mypageurl.com/qa-include/ i can see the all files on web browser , my q2a page was hacked I think because of this , folders permissions are 755 , and files 644 is it true?

Answer 1

Add this to the first line of your .htaccess file:

Options -Indexes

There. Done.

Answer 2

check your server settings. You can disable listing of files in directories.

Answer 3

like this ?

 

DirectoryIndex index.php

<IfModule mod_rewrite.c>

RewriteEngine On

#RewriteBase /

RewriteCond %{REQUEST_URI} ^(.*)//(.*)$

RewriteRule . %1/%2 [R=301,L]

RewriteCond %{REQUEST_FILENAME} !-f

RewriteCond %{REQUEST_FILENAME} !-d

RewriteRule ^.*$ index.php?qa-rewrite=$0&%{QUERY_STRING} [L]

</IfModule>

Options -Indexes

or like this? 

 

DirectoryIndex index.php

<IfModule mod_rewrite.c>

RewriteEngine On

#RewriteBase /

Options -Indexes

RewriteCond %{REQUEST_URI} ^(.*)//(.*)$

RewriteRule . %1/%2 [R=301,L]

RewriteCond %{REQUEST_FILENAME} !-f

RewriteCond %{REQUEST_FILENAME} !-d

RewriteRule ^.*$ index.php?qa-rewrite=$0&%{QUERY_STRING} [L]

</IfModule>

 

thank you very much