Create .htaccess

Disallow direct access to PHP files for security