title: Preventing directory scanning from Acunetix
body: <p>I have a PHP enabled site, with directory-listing turned off. </p>
  
  <p>But, when I used Acunetix: (web vulnerability scanning software) to scan my site, and other high-profile websites, it was able to list all directories &amp; files. </p>
  
  <p>I don't know what this is happening, but I have this theory: maybe the software is using English words, trying to see if a folder exists by trying names like "<code>include/</code>", "<code>css/</code>", "<code>/images</code>", etc. Then, maybe it is able to list files that way.</p>
  
  <p>Because, if directory listing is off, I don't know what more there is to do.</p>
  
  <p>So, I devised this plan, that if I give my folders/files difficult names like I3Nc_lude, 11css11, etc., maybe it would be difficult for the software to find the names. What do you think? </p>
  
  <p>I know, I could be dead-wrong about this, and the idea might be laughable but, that is why I am asking for help. </p>
  
  <p>How do you Completely! Forbid directory listing??</p>