How to hide an original server side include file?

Hi,

I did server side include setting of header.php file in index.php.
When I checked the link like this (https://bestinx.me/header.php), I can see header.php in browser.
How can I avoid somebody to access header.php directly?

Thanks