I’d think it’s the way I did it, a .htaccess:

Order Deny,Allow
Deny from all
Allow from 127.0.0.1