You could also create an htaccess file in that directory, with the statement:
Code:
deny from all
That would deny direct access to the files in that directory.