1. put a blank index.html in each directory you want to
     protect(against directory listing),
         OR
  2. assuming the webserver config is configured for it,
     you can also put a .htaccess file in each directory
     you want to protect.