You can't block access to JavaScript or CSS files (well, you could but it'd be pointless) but you can block direct access to files like PHP includes, etc. Take a look at the Files and Allow/Deny directives in the Apache manual.