added a 403 forbidden page alongside the 404, changed all hrefs and links within these so they are relative to the index page not the page the visitor is on. set the Options -Index directive in htaccess that disallows users viewing directories and their contents