Files folder should be an htaccess file, it should originally be in it if you haven't extracted it. I have it in and so only the given picture can be viewed.