How to block access to all hidden files on your account?
Add the following lines inside the .htaccess file in the public_html folder:
RewriteEngine on
RewriteRule (^.|/.) - [F]After adding the above rules, when dot files or folders are accessed a 403 Forbidden error will be returned.