When a browser looks at a site directory that does not have an index.html file, the browser can list the files in that directory. To have the server start listing files for such directories, use the line in the .htaccess file:
Options + Indexes.
To return an error (403 - Forbidden) use the line:
Options -Indexes.