for starters i have Options -Indexes set (as default) for all domains
so if i access domain.com/ (and theres no index.php) i get 403 forbidden, thats good for security
but with mod_userdir enabled (i like it) if i access
server.com/~user/ - i get a directory listing for domain.com ...
its not too secure as result as my username are my domain names... any work around to prevent the directory listing overide by mod_userdir ??