I'm using a json file as a DB in my project and I dont want users to be able to access it via url. Here's what my .htaccess file looks like.
<Files "/users.json">
deny from all
</Files>
But it doesn't work. "users.json" is stil accessable via direct url.