# Block direct web access but allow PHP to read files
<FilesMatch "\.json$">
  Order Allow,Deny
  Deny from all
</FilesMatch>