Ubuntu server 14.04 Apache directory listing enabled by default
This could be used to rip your back end code.
Please open /etc/apache2/apache2.conf in your favourite editor
and remove the work Indexes from the following part
Dont forget to restart the apache by # /etc/init.d/apache2 restart
Hope this helps others to secure their servers.
I got a big scare when I discovered this being enabled by default.