Issue #76: Disable directory listings for attachments.

README

@@ -120,6 +120,20 @@ the current version of Jutda Helpdesk working.
 
    This is NOT recommended, especially if you're on a shared server.
 
+8. Ensure that your 'attachments' folder has directory listings turned off, 
+   to ensure users don't download files that they are not specifically linked 
+   to from their tickets.
+
+   If you are using Apache, put a .htaccess file in the 'attachments' folder 
+   with the following content:
+
+    Options -Indexes
+
+   You will also have to make sure that .htaccess files aren't being ignored.
+
+   Ideally, accessing http://MEDIA_URL/helpdesk/attachments/ will give you a 
+   403 access denied error.
+
 #########################
 5. Initial Configuration
 #########################