Easier way to do it :)

Just add the following to your .htaccess in any directory that may be writable (not that public writable directories are encouraged, but for those with no choice... at the very least protect them :)

Feel free to specify additional extensions between pipe symbols.




Order Allow,Deny
Deny from all


More...