this does nothing to hide the folder where the images are stored from direct access, right? an .htaccess file is still required in that folder?