all versions: direct access of view files forbidden via .htaccess