# Block access to sensitive files
<FilesMatch "\.(htaccess|htpasswd|ini|log|sh|php)$">
Order Allow,Deny
Deny from all
</FilesMatch>