The first directive forbids access to any files except from localhost, because of Order Deny,Allow , Allow gets applied later, the second directive ...
order deny,allow deny from all
If you'd like to deny all but a few files, this would read as. Order deny,allow Deny
from all
Block all ".php" files
Order allow,deny. Allow from all. Satisfy any.
/Files >.
Second – in the same directory create a file named .htaccess with the following
content.
.htaccess is one file that every web admin should know and understand. At its basic level
The following code forces any file ending in .inc to throw a 403 Forbidden error
when visited: