Which php files, in a WordPress setup, do not need direct web access?

Which php files, in a WordPress setup, do not need direct web access?