make sure the webserver doesnt show a directory listing of any of these directories
only show contract orders for specific contact