for the .htaccess file, immediately before # END WordPress


Order allow,deny
Deny from all

Background information