Prevent direct access to scripts and folder listings

This Pull Request addresses the following issues:

- Stop anyone from listing the plugin subfolders by adding an `index.php` file.
- Stop anyone from executing a script directly by checking if a WordPress admin constant is defined