Unless disabled, requesting appid:index or appid:indext will provide a list of all the public pages in a WebHub application. The index page provides the information as a bulleted list, and the indext page provides the same information in an html table.

There are two ways to increase security.

1. Create your own pages with PageID of INDEX and INDEXT. That will completely replace the built-in pages.
2. Hide specific private pages from the index by starting their description with a hyphen. For example:

   <whpage pageid="admin" desc="-administrator login page not shown to public">
   page content here...
   </whpage>
   

The built-in pages are completely standalone. If you like the idea of a site index but you want to embed the list onto your own custom-designed web page, you have to create a webaction component which calls the function that produces the list.

procedure TfmNavigation.waSiteIndexExecute(Sender: TObject);
begin
  inherited;
  pWebApp.SendString(pWebApp.BuiltInIndex(False));  //BuiltInIndex method added in v2.089
end;