Uh dbistler, you are aware that unless someone has file access (in which case you're screwed anyway), they are unable to read the file? It doesn't matter whether you block access to it in htaccess or not, it is a PHP file and therefore impossible to read from the client side.