Hostbill downloads folder lockdown to prevent public access to your SQL backups in /downloads (and thus your clients information)

apache .htaccess

#create or update the .htaccess file inside /downloads to prevent information leakage of client data
deny from all
Options -Indexes

nginx vhost config lines

# place this in your hostbill vhost above your location / block

location ^/downloads/ {
  deny all;
  autoindex off;
}