title: protect php includes (with htaccess?)
body: <p>First of all, I'm pretty sure a similar question will be on Stack Overflow, but I didn't really find it. Probably because I am using the wrong keywords. So don't shoot me because of that.</p>
  
  <p>What my question basically is, I want to include php files, but I only want them to be included and not for people to be opened with their browser. They should get an error.</p>
  
  <p>For example I have an includes directory with a php file which contains my connection to a DB (password etc.. dangerous?) . I want to be able to include it, but I don't want people to directly visit the page.</p>
  
  <p>Will putting a password on the includes directory with htaccess fix my problem? First I thought it wouldn't, because it would be weird that pages can be included for users that don't have access to it. But it seems to work, how does this come? Is there an other better option ? What do web developers usual do?</p>
  
  <p>And also can I do something similar for javascript files? My guess is that this won't be the case, but I'm just asking. The js file contains ajax calls to certain pages, but I guess I'm happy if I can protect the php pages from visiting.</p>
  
  <p>Anyway thanks in advance :)</p>