I was told to add that code to block people from using iFrame which they did to try to scam me and phish for my passwords.
Shouldn't it say DENY from all?
<Files 403.shtml> order allow,deny DENY from all