Disable directory listing just in case

apache2-wordpress.conf

@@ -12,6 +12,7 @@
 
     # some directories must be protected
    <Directory /app/code/wp-content>
+        DirectoryIndex Off
         Options -FollowSymLinks
         AllowOverride None
         <IfModule mod_php5.c>