disallow visiting .ini file from webserver

Added a .htaccess rule to deny a request for *.ini.