protect .htaccess and config.php against accessing by strangers

diff --git a/.htaccess b/.htaccess
index 22b33f000f48df6702965e0ee3d66fbe32e28671..bdf8c201554d20eccb491ab7c9c387c65d1a5857 100644 (file)
--- a/.htaccess
+++ b/.htaccess
@@ -1,3 +1,16 @@
 AddType image/svg+xml svg
 AddType image/svg+xml svgz
 
+# PROTECT all htaccess files
+<Files ~ "^[\._]ht">
+  Order Allow,Deny
+  Deny from all
+  Satisfy All
+</Files>
+
+# PROTECT config.php
+<files config.php>
+  Order Allow,Deny
+  Deny from all
+  Satisfy all
+</files>
\ No newline at end of file