disable directory browsing and add htaccess file protection