spacedog

ok, here's a question I need some help with.

say I have domain.com/directory/
and in that directory is subdirectory images
subdirectory cgi bin & a few more subdirectories & in directory is html files & some php & .txt & the .css & some scripts

so, domain.com/directory/images
and domain.com/directory/cgi_bin
domain.com/directory/page10.php
domain.com/directory/page10.css

ok, now lets say visitor goes to domain.com./directory/page10.php and he cuts out page10.php so that it shows domain.com/directory & now he see's everything in that directory. What do I do so that people can not access this.

also, I want to deny access to all the scripts, php files & .css & denie access to anything at all that is not an html page or image
How can I block everyone out except for myself.