Never put sensitive data in a web-accessible folder. If you must share internal files, password-protect the directory using .htaccess (Apache) or auth_basic (Nginx).
Not all open directories are safe. Some are set up as honeypots or contain malware. index of files best
</style> </head> <body> <h1>Index of /files</h1> Never put sensitive data in a web-accessible folder