For security reasons, we block access to certain files when accessed from the web.
Full list of things that are blocked:
# wp-config.php and variations thereof
# .php files in uploads folder
# backup extensions and log files
# log files
*.log.x (where x is a number)
*.log.x.gz (where x is a number)