Making files only executable locally

Add the following to your .htaccess file to prevent files from being accessible from external sites:

Order deny,allow
Deny from all
Allow from localhost 127.0.0.0/8 ::1 externalIP/32