Re: Theme Protection
Generally directories should have index options directive set to disable to prevent viewing a directory tree of files within it, when you see an empty index file in a directory it’s generally there as a safe guard as an index file would be served up if found rather than tree view of files if the option indexes is set to allow.
A php file is not possible to view as it can only be executed by the server.
A CSS file which essentially a plain ansi text file is always viewable from it’s directory http://example.com/styles/style.css
You can try and protect these sorts of files but for anyone with basic skill levels it’s fairly easy to circumvent protections.