Forum Moderators: phranque
You don't have to protect the directory to prevent browsing. See the description of Options Indexes [httpd.apache.org] in the Apache core features documentation. You may also want to review the DirectoryIndex directive [httpd.apache.org] in Apache mod_dir.
HTH,
Jim
welcome to webmasterworld. times ago, it was possible to browse directories even if an index file existed. but today this does not work any longer that well. so if you place a index.html into it, browsing is prevented.
as jdmorgan stated, on apache it's quite easy to go around this and setup a handler to prevent browsing directories.