Block access to content with htaccess

CodeIgniter already have those settings for application and system. If it's not working, you don't have "AllowOverride All".

Code:

<IfModule authz_core_module>
    Require all denied
</IfModule>
<IfModule !authz_core_module>
    Deny from all
</IfModule>