How to add user and protect access to SD folder

I would like protect the access to my php files inside te SD .
If we surf to http://xyz/SD (xyz is my arduino yun adres) people can see the list of all mzy files.

I donot know linux/openwrt so I hope somebody can help me to:

  1. create a user/pass to protec the access to SD folder
  2. avoid people to see the list of files
  3. setting default page
    --> I tried to put on the uhttp: list index_page "index.html index.php" but did not work

Thank's in advance for any help
clod

Install su and useradd

http://forum.arduino.cc/index.php?topic=284982.msg1997130#msg1997130

chown  sonnyyu:sonnyyu /mnt/sda1/read2.py
chmod 755 /mnt/sda1/read2.py

Setup index page

http://forum.arduino.cc/index.php?topic=242120.msg1940499#msg1940499