Add the directive Options -Indexes to your primary .htaccess file or the central server configuration file.
Clicking a link on a fake index page may download an executable file disguised as a video (e.g., video.mp4.exe ). index of xxx mp4 work
When a web server is configured to allow directory browsing, it generates an automated list of all files and folders contained within that directory. Users exploit this behavior by combining specific terms to filter results: Add the directive Options -Indexes to your primary