because of the fact that there is a apache htaccess file in application directory with a "deny from all" statement, there is no need to have

if (!defined('BASEPATH')) {
exit('No direct script access allowed');
}

in some files, in some files not

to be or not to be, its a question of consistency