Maybe you could create a separate folder within the document root and
create a .htaccess file to deny access? It's straight forward, although
I'm sure fernando's suggestion is the more secure option.
..htaccess (in the protected directory):
----
allow from all
----