deny from all

<Files download.php>
allow from all
</Files>
