Forget what Danny says,
it's not the right way to always want to put everything in the template or in events or to use javascript,
hfs already has a large amount of technical possibilities to satisfy a lot of situations
1) your folder must first be added to VFS as real folder
2) right click on it to access its properties on the "FLAGS" tab
3) check browsable and no download
4) go to the "PERMISSIONS" tab? then the "UPLOAD" sub-tab and check Anyone if you accept that anyone can upload a file in the directory, otherwise check "Any account" if you want only logged in people to be able to uplode
5) to allow you to keep management access, go to the "DELETE" sub-tab and check your username, this will give you additional command buttons on the web page
as it is, the contents of the directory will be visible to any user, this amounts to the same if in the "ACCESS" sub-tab is checked "Anayone", otherwise in this tab by checking "Any account", only authenticated users will be able to see it. the contents