I have a VPS, running apache2 on Debian 6.
Created a file called .htaccess on the web root, which included:
<Files ~ "\.db$">
Order allow,deny
Deny from all
</Files>
<FilesMatch "\.db$">
Deny from all
</FilesMatch>
Can still manually download the database.db file that exists in the same directory as the .htaccess file. Restarted Apache2, same.
What gives?
AllowOverride
setting for that directory? Also, for future reference, you don't need to restart Apache for .htaccess changes to take effect.