By default, if you don't have an index file in a web accessible folder, when accessed through a browser, its contents will be listed.

To prevent the listing of the folder's contents, you should add the following line to the .htaccess file in the folder (if there is no .htaccess file, you can easily create a new one):

Options -Indexes