One possibility is to change the permissions of the website root folder so that apache cant read the files.