The solution is to create an small index.php file that returns nothing, such as this:
<?php // Silence is golden. // or display some message with an echo command: // echo "Cannot be displayed"; ?>
When someone puts the folder name without a filename after it, Apache will generally attempt to run the index.php of that directory.
You don’t need to change .htaccess or the CPANEL indexing options if you do this.