How to prohibit direct access not only to the category but also to the files?

Question

htaccess

Hello!

There are several categories on the site, direct access to which must be prohibited, and, accordingly, to files located in these categories. I created a .htaccess

file inside these categories and wrote in it:

order deny,allow
deny from all
allow from 127.0.0.1

When you open this category directly - everything works. issues 403. For example, when opening site.ru/includes

But if, for example, enter site.ru/includes/config.js , then the contents of the file can be easily opened

How to solve this issue? Thanks in advance