Easy - don't put the files you want to protect in a web accessible directory. Or put them in a password protected directory - see mod_auth and its cousins.