Instead, do this:

When a web server is configured to serve a website, the administrator is supposed to tell it which files to show the public and which to hide. However, due to negligence, misconfiguration, or a lack of technical knowledge, many servers are left in a default state where they simply list every file in a directory.