In your server block:
Index of /data/uploads/user_content [PARENTDIR] Parent Directory 2024-01-01 00:00 - [ ] 2023_annual_report.pdf 2024-01-15 09:23 2.1M [ ] admin_credentials.txt 2024-01-10 14:02 124 [ ] profile_pics/ 2024-01-20 11:00 - [ ] database_dump.sql 2024-01-05 22:15 45M index of parent directory uploads
If the server has indexing on, you would see: and their exposure is a risk
For developers: Always disable directory indexing on any folder that handles user uploads. Add a default index.html or index.php to every subdirectory during your build process. index of parent directory uploads
For users: If you ever stumble upon an open uploads directory, resist the urge to explore. Remember that those files belong to someone, and their exposure is a risk, not an invitation.
location /uploads { autoindex off; } Set strict permissions for uploads directories: