For security reasons, the [.htaccess] file contents should not be visible to the public. To secure it, add the following lines to the [.htaccess] file:
# Prevent Apache from serving .ht* files:
<FilesMatch "^\.ht">
Order allow,deny
Deny from all
</FilesMatch>