Adding .htaccess files to prohibit access to critical directories, e.g., db/