If you goes on http://www.mydomain.com/download/files/ - you can see all my download files, but how can I disable that people can see my download files on that URL?
You have to disable directory listing. You do this via your Web Server. If your pages are hosted by a third party, contact your host and ask if they can disable it so users cannot view directory listings.
Ok! Thanks for the help!