# Deny all direct web access to this folder (Apache 2.4)
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
# Apache 2.2 fallback
<IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
</IfModule>
