# Status Code 200 error in uploads folder **URL:** \ **Category:** Security\ **Created:** [February 1, 2022, 2:45pm UTC](https://ask.gibbonedu.org/t/status-code-200-error-in-uploads-folder/3377 "2022-02-01T14:45:59Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![manuelruizp84](https://ask.gibbonedu.org/letter_avatar_proxy/v4/letter/m/dbc845/32.png) [@manuelruizp84](https://ask.gibbonedu.org/u/manuelruizp84)\ **Post date:** [February 1, 2022, 2:45pm UTC](https://ask.gibbonedu.org/t/status-code-200-error-in-uploads-folder/3377/1 "2022-02-01T14:45:59Z")
Hello there, I’m getting this error in my version 23 installation. The system check has detected that your uploads folder is returning a 200 status code, which indicates that it is publicly accessible. This suggests a serious issue in your server configuration that should be addressed immediately. Please visit our Post-Install and Server Config page for instructions to fix this issue. I followed all the steps but I’m still stuck… What I don’t understand is that the 200 status code is supposed to be a “success” status code… 😕 Any suggestions? ---
**Author:** ![sandra](https://ask.gibbonedu.org/user_avatar/ask.gibbonedu.org/sandra/32/5_2.png) [@sandra](https://ask.gibbonedu.org/u/sandra)\ **Post date:** [February 2, 2022, 5:00am UTC](https://ask.gibbonedu.org/t/status-code-200-error-in-uploads-folder/3377/2 "2022-02-02T05:00:48Z")
Hi Manuel, we added this check into v23 to help identify security issues where your uploads folder might be web-accessible, which can be serious because it means anyone on the internet could access uploaded files. If you open your web browser, go to your Gibbon url + /uploads (for my test system, it’s [http://localhost:8888/uploads](http://localhost:8888/uploads)). You should see a 403 Forbidden or a 404 Not Found, which would indicate that your uploads folder is secure. If you can see a list of files in the folder, this means your system has directory Indexes turned on, which will need to be turned off to secure your files. ---
**Author:** ![manuelruizp84](https://ask.gibbonedu.org/letter_avatar_proxy/v4/letter/m/dbc845/32.png) [@manuelruizp84](https://ask.gibbonedu.org/u/manuelruizp84)\ **Post date:** [February 2, 2022, 12:06pm UTC](https://ask.gibbonedu.org/t/status-code-200-error-in-uploads-folder/3377/3 "2022-02-02T12:06:13Z")
I was already getting this on my browser: [https://gibbon.cbc.edu.do/uploads](https://gibbon.cbc.edu.do/uploads) Forbidden You don’t have permission to access this resource. Apache/2.4.41 (Ubuntu) Server at gibbon.cbc.edu.do Port 443 So I guess everything is set but in my own installation, but Gibbon still giving this warning… Guess the Gibbon system check needs a few tweaks there. ---
**Author:** ![Qualitymix](https://ask.gibbonedu.org/letter_avatar_proxy/v4/letter/q/74df32/32.png) [@Qualitymix](https://ask.gibbonedu.org/u/Qualitymix)\ **Post date:** [February 2, 2022, 12:54pm UTC](https://ask.gibbonedu.org/t/status-code-200-error-in-uploads-folder/3377/4 "2022-02-02T12:54:55Z")
If you head to your apache2 config file, there is an option that you can remove that fixes this issue. It’s called folder indexing and is typically found here: /etc/apache2/apache2.conf The lines you’re looking for are these: ``` Options FollowSymLinks AllowOverride None Require all granted ` ...So you remove the indexing feature. ``` ---
**Author:** ![Qualitymix](https://ask.gibbonedu.org/letter_avatar_proxy/v4/letter/q/74df32/32.png) [@Qualitymix](https://ask.gibbonedu.org/u/Qualitymix)\ **Post date:** [February 2, 2022, 12:58pm UTC](https://ask.gibbonedu.org/t/status-code-200-error-in-uploads-folder/3377/5 "2022-02-02T12:58:54Z")
There is apparently no easy way to show \< \> tags in this forum! So here we go again: Replace this: \< Directory /var/www/ \> Options Indexes FollowSymLinks AllowOverride None Require all granted \< /Directory \> With this: \< Directory /var/www/ \> Options FollowSymLinks AllowOverride None Require all granted \< /Directory \> I had to add spaces to the \< \>, so make sure you’re not copying and pasting from here. Just remove the word Indexes! ---
**Author:** ![manuelruizp84](https://ask.gibbonedu.org/letter_avatar_proxy/v4/letter/m/dbc845/32.png) [@manuelruizp84](https://ask.gibbonedu.org/u/manuelruizp84)\ **Post date:** [February 2, 2022, 1:03pm UTC](https://ask.gibbonedu.org/t/status-code-200-error-in-uploads-folder/3377/6 "2022-02-02T13:03:15Z")
Qualitymix, thank you!!! It’s working fine now! ---
**Author:** ![manuelruizp84](https://ask.gibbonedu.org/letter_avatar_proxy/v4/letter/m/dbc845/32.png) [@manuelruizp84](https://ask.gibbonedu.org/u/manuelruizp84)\ **Post date:** [February 2, 2022, 1:05pm UTC](https://ask.gibbonedu.org/t/status-code-200-error-in-uploads-folder/3377/7 "2022-02-02T13:05:18Z")
Yes, I found it!!! restarted apache2 service and WALAH! No warnings from Gibbon… Just needed to remove the word “indexes”. Thanks!! Last week has been really the longest time that I spent using and setting up Linux (normally a Windows user)… And so far, learning a LOT. Thanks!! ---
**Author:** ![sandra](https://ask.gibbonedu.org/user_avatar/ask.gibbonedu.org/sandra/32/5_2.png) [@sandra](https://ask.gibbonedu.org/u/sandra)\ **Post date:** [February 7, 2022, 12:49am UTC](https://ask.gibbonedu.org/t/status-code-200-error-in-uploads-folder/3377/8 "2022-02-07T00:49:47Z")
Thanks for the instructions Qualitymix, I’ll update our documentation for this process so that it’s more clear and includes these instructions for Apache : )