Even if you do use .htaccess files, you still shouldn't be showing them to anyone who requests them from your web server!