--- title: FileMaker 13 & 14 WebDirect Security Patch description: FileMaker 13 & 14 WebDirect security patch image: https://blog.gomainspring.com/hubfs/Imported_Blog_Media/end-user-security-1.jpeg --- [![Mainspring, Inc.](https://blog.gomainspring.com/hubfs/MainSpring_June2024/Images/mainspring-logo-cybersecurity-it-services-automation-qjudg0lgsu8o3zserelwpic5pgl0i7mbxusowrykj8.png)](https://gomainspring.com/) [mailto:hello@gomainspring.com](mailto:hello@gomainspring.com) - [About](https://gomainspring.com/about/) - [Our Team](https://gomainspring.com/our-team/) - [Industries](https://gomainspring.com/industries/) - [Partners & Certifications](https://gomainspring.com/partners-certifications/) - [Careers](https://gomainspring.com/careers/) - [Solutions](https://gomainspring.com/solutions/) - [Cybersecurity](https://gomainspring.com/solutions/cybersecurity/) - [ProSuite™](https://gomainspring.com/solutions/prosuite/) - [Automation](https://gomainspring.com/solutions/automation/) - [FileMaker Development](https://gomainspring.com/solutions/filemaker/) - [Apple Device Lifecycle Services](https://gomainspring.com/solutions/apple-services/) - [vCIO](https://gomainspring.com/solutions/vcio/) - [Cost Management](https://gomainspring.com/solutions/cost-management/) - [Support & Help Desk](https://gomainspring.com/solutions/support-help-desk/) - [Case Studies](https://gomainspring.com/case-studies/) - Pricing - [ProSuite™](https://gomainspring.com/pricing/) - [Evolve™](https://gomainspring.com/pricing-evolve/) - Resources - [Blog](https://blog.gomainspring.com/) - [Media Resources](https://gomainspring.com/media-resources/) - [Downloads](https://info.gomainspring.com/resources) - [News & Events](https://blog.gomainspring.com/news) - [Contact Us](https://gomainspring.com/contact-us/) # FileMaker 13 & 14 WebDirect Security Patch ### Subscribe to Our Blog - [Home](https://gomainspring.com/) - Resources - Blog Topics: [Cybersecurity](https://blog.gomainspring.com/topic/cybersecurity), [FileMaker](https://blog.gomainspring.com/topic/filemaker), [FileMaker 13](https://blog.gomainspring.com/topic/filemaker-13), [FileMaker support](https://blog.gomainspring.com/topic/filemaker-support), [Automation](https://blog.gomainspring.com/topic/automation), [FileMaker 14](https://blog.gomainspring.com/topic/filemaker-14), [FileMaker 16](https://blog.gomainspring.com/topic/filemaker-16), [FileMaker hosting](https://blog.gomainspring.com/topic/filemaker-hosting) Even though [FileMaker 16](https://gomainspring.com/topic/filemaker-16/) is the current version, MainSpring has supported clients with WebDirect servers since it was released in version 13, and [FileMaker server 14 will be supported until September 2018](https://gomainspring.com/filemaker-community/4-reasons-you-should-move-off-of-filemaker-shared-hosting/). Because of this, it's important for us to call attention to the recent security risk that was identified on FileMaker servers 13 and 14. #### WebDirect security risk discovered Recently, we discovered that due to a lack of a robots.txt file in the WebDirect installation on FileMaker server 13 and 14, the URL of your WebDirect server can be indexed by search engines such as Google, Bing and Yahoo. This could unintentionally grant remote users the ability to visit your WebDirect homepage, and potentially gain access to files in an unexpected way. A **robots.txt file** is a simple text file that asks any “search bot” that’s crawling a page or archiving information to follow a specific set of rules. While the robots.txt can be ignored by malicious bots, most modern search engines will respect those rules. In FileMaker Server 15+, the server configuration already contains the rules for turning off indexing by default, but you can still install the robots.txt file if you want. #### How to install the WebDirect security patch So, how do you add this patch? Simply create a robots.txt file in the following directory: - **Mac**: HDD/Library/FileMaker Server/HTTPServer/conf/ - **PC**: C:/Program Files/FileMaker/FileMaker Server/HTTPServer/conf/ ![](https://blog.gomainspring.com/hs-fs/hubfs/Imported_Blog_Media/MB201806_01-600x33.png?width=600&height=33&name=MB201806_01-600x33.png) Folder path on a windows server Inside of your robots.txt file, input the following code: - User-agent: \* - Disallow: / ![](https://blog.gomainspring.com/hs-fs/hubfs/Imported_Blog_Media/MB201806_02-600x28.png?width=600&height=28&name=MB201806_02-600x28.png) robots.txt file in the folder Now, save, and you’re finished! This would be a good time to install any updates, and restart your server, as well. Also, it’s important to note that, if your server address was already indexed on a search engine, it may take a few weeks for the bots to revisit your page and refresh their directory. #### Additional ways to secure your WebDirect server So, here are some other steps you may want to do in order to secure your server… - Disable guest access for all files, or at least perform a security check to make sure the guest account has severely limited access - Enable the server setting “Show only files for which each user has access to”. This will require a user to provide their username and password in order to view the WebDirect homepage. - Make sure to check that none of your files are hosted with the default “admin” account with no password. If so, we recommend [setting a strong password](https://gomainspring.com/cybersecurity-awareness/3-ways-to-improve-your-cybersecurity-posture-without-breaking-the-bank/) and changing the account name from admin to something else. - Install an SSL certificate if you do not have one already ![](https://blog.gomainspring.com/hs-fs/hubfs/Imported_Blog_Media/MB201806_03-600x353.png?width=600&height=353&name=MB201806_03-600x353.png) Other security settings in FileMaker server ### About the Author ![Mike Beargie](https://blog.gomainspring.com/hubfs/mainspring_mike_beargie_004_CROPPED-913x1200-1-250x250.jpg "Mike Beargie") Mike Beargie has been with MainSpring since 2013 and has over 10 years of application development experience. As a developer, he creates solutions for clients in a wide variety of sectors across the U.S. and abroad. Prior to working at MainSpring, Mike worked as the lead developer for a consulting company, serving high profile political, special interest and nonprofit clients in the Washington, D.C., and Columbus, Ohio, markets. Mike regularly presents solutions and best practices to the FileMaker development community around the country, and is well known as an answer man online as well. In 2014 and 2016, Mike was recognized with the FileMaker Excellence Award for community contributions. Mike is a man of many hobbies, including woodworking, home brewing, art and music. [More Articles by Mike Beargie](https://blog.gomainspring.com/author/mbeargie) ### Related Articles ## Getting Started We’ll discuss your business, needs, and expectations to get you on a path to better IT. [Contact Us](https://gomainspring.com/contact-us/) [![Mainspring, Inc.](https://blog.gomainspring.com/hubfs/MainSpring_June2024/Images/mainspring-logo-cybersecurity-it-services-automation.png)](https://gomainspring.com/) [MainSpring, Inc.](https://gomainspring.com/) 8 E. Second Street, Suite 205 Frederick, MD 21701 [301.948.8077](tel:3019488077) [hello@gomainspring.com](mailto:hello@gomainspring.com) © 2026 [MainSpring, Inc.](https://gomainspring.com/) All rights reserved | Designed & Developed by [ONEFIRE](https://onefire.com/) | [Privacy Policy](https://gomainspring.com/privacy-policy/) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Mike Beargie", "url" : "https://blog.gomainspring.com/author/mbeargie" }, "dateModified" : "2024-05-07T20:47:53.223Z", "datePublished" : "2018-03-29T20:30:05.000Z", "headline" : "FileMaker 13 & 14 WebDirect Security Patch", "image" : [ "https://blog.gomainspring.com/hubfs/Imported_Blog_Media/end-user-security-1.jpeg" ], "mainEntityOfPage" : { "@id" : "https://blog.gomainspring.com/filemaker-community/filemaker-13-14-webdirect-security-patch", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.gomainspring.com/hubfs/mainspring-logo-cybersecurity-it-services-automation.png" }, "name" : "MainSpring, Inc." } } ```