If you really want to protect your php files, include it from a directory where there is a .htaccess file with "deny from all", php still will be able to include it and execute, moreover, that directory could be outside public_html or www directory whatever, I mean somewhere, before public_html/ that it wouldn't be directly accessible to users, but php will still be able to include them.