Please follow this best practices while developing your plugin:
- Always add a prefix on function names, class names and database tables.
- Don't load plugin assets (like css/js) on all places. Load it only where it needed.
- Don't insert anything in settings table for your plugin purposes. Create your own table to store settings for your own. But you can get data of settings table always.
- To prevent showing directory listing, add an index.html file on all sub folders of your plugin. You can use this code:
<html>
<head>
<title>403 Forbidden</title>
</head>
<body>
<p>Directory access is forbidden.</p>
</body>
</html>