block the include dir from web access
@@ -0,0 +1 @@
deny from all
The note is not visible to the blocked user.