I have designed a website, and within it I have a range of PHP scripts which interact with my system. For example, if a user uploads an image, this is processed by the script
You can set deny from all on .htaccess and include these files from some accessible directory