See if this works for you.

public_html/.htaccess

Code:
<Files ".ht*">
Deny from all
Allow from localhost
</Files>
Also, a good idea to set 444 permissions on any/all .htaccess files. You just have to remember that to edit an .htaccess file change permissions to 644.