Placing an empty index.html file in every directory you wish to protect is a common workaround. This prevents the default directory listing because the server will find that index.html file and try to serve it instead. However, it's considered a band-aid , not a real fix. It doesn't address the core misconfiguration and is impractical to manage for sites with many folders.
Confirm that you see a error or a blank page, rather than a list of files with a "Parent Directory" navigation link. parent directory index of private images install
Stay secure. Stay private. And never rely on "security by obscurity"—a hidden directory is not a protected directory. Placing an empty index
Run from an external machine:
Site written in Python using Flask. Design modified by Maya Horton from TEMPLATED under a CC.BY 2.0 licence.