Post the second question in a separate thread. And apply more context.
the short answer is, if you don't want the files to be served, move them out of the web folder. But I suspect you want them to be served "some of the time". So more context is necessary.
cheers
Bruce