View file upload/templates/Default/.htaccess

Order allow,deny
Deny from all

<FilesMatch "\.(css)$|^$">
   Order deny,allow
   Allow from all
</FilesMatch>