I saw several htaccess example disabling some files to access:
order deny,allow deny from all
You can change file permission to "600", so you can just access it via your script, and it will deny direct access.
http://php.net/manual/en/function.chmod.php